对 Looker Studio 资源（报告和数据源）的访问权限基于 Google Cloud Identity and Access Management (IAM) 系统。借助 IAM，您可以将用户分配给预定义的角色，从而管理对 Looker Studio 资源的访问权限。角色是一组权限，可让用户执行某些操作，同时禁止用户执行其他操作。
[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-25。"],[],[],null,["# Roles and permissions\n\nAccess to Looker Studio assets (reports and data sources) is based on the Google Cloud Identity and Access Management (IAM) system. With IAM, you manage access to Looker Studio assets by assigning users to a predefined *role* . A role is a collection of *permissions* that allows users to perform certain actions while preventing them from performing other actions.\n\n[Learn more about IAM](/iam/docs/overview).\n| **Tip:** Roles and permissions don't govern who can actually see the data that is provided by a data source. This is governed by [data credentials](/looker/docs/studio/data-credentials).\n|\n| Changes to IAM permissions and roles may cause a propagation latency, and report content may temporarily be visible to users whose access has been removed. For more information, see [Access change propagation](/iam/docs/access-change-propagation).\n\nBasic roles\n-----------\n\nThe following basic roles are available to all Looker Studio users. Basic roles apply to individual assets. For example, you can grant a user the **Editor** role on a particular report and the **Viewer** role on the data source that is added to that report.\n\nSee [Role details](#details) for more granular capabilities.\n\nTeam workspace roles\n--------------------\n\nThe following roles are available to users of Looker Studio Pro whose organization has a Google Cloud project linked through the Admin console. Team workspace roles are applied at the workspace level and govern access to the assets that are contained in that workspace.\n\nRole details\n------------\n\nThe following tables show the granular capabilities of each role according to feature area.\n| **Tip:** To see individual IAM permissions, visit [IAM permissions reference](/iam/docs/permissions-reference) and search for `datastudio`. Note that Looker Studio does not support custom roles.\n\n### Feature area: Reports\n\n| **Note:** The role capabilities listed previously refer specifically to reusable data sources. For [embedded data sources](/looker/docs/studio/embedded-data-sources), people with the Editor role on the report can view and modify the data source.\n\n### Feature area: Data sources\n\n### Feature area: Sharing\n\nThese capabilities apply to both reports and data sources, unless otherwise specified.\n\n| **Note:** Viewers can also create and edit schedules if they are granted [scheduling permissions](/looker/docs/studio/invite-others-to-your-reports) by an Editor or Owner.\n\n### Feature area: Team workspaces\n\nThese capabilities apply only to Looker Studio Pro team workspace roles. Basic roles are not applicable.\n\n\u003cbr /\u003e\n\n\\* If a Manager is moving an asset from one team workspace to another team workspace, they must have one of the three roles in the target team workspace.\n\n\\*\\* Content managers can add or remove Contributors.\n\nRelated resources\n-----------------\n\n- [About team workspaces](/looker/docs/studio/about-team-workspaces)\n- [Organize assets with folders in team workspaces](/looker/docs/studio/organize-assets-with-folders-in-team-workspaces)"]]
