Google Data Studio Get

Google Data Studio Get

Certified

List Data Studio asset permissions

List who has access to a report or data source, grouped by role.

yaml
type: io.kestra.plugin.datastudio.permissions.Get

Audit who can view a report

yaml
id: permissions_get
namespace: company.team

inputs:
  - id: asset_id
    type: STRING

tasks:
  - id: get
    type: io.kestra.plugin.datastudio.permissions.Get
    serviceAccount: "{{ secret('GCP_SERVICE_ACCOUNT_JSON') }}"
    assetName: "{{ inputs.asset_id }}"
Properties

Asset name

The Data Studio asset ID.

Access token

OAuth access token. When set, the service account exchange is skipped, so the token must already include datastudio.readonly for read tasks or datastudio for Add and Revoke.

Assets this task consumes as inputs or produces as outputs, for lineage tracking and the asset graph (Enterprise Edition). A flow declaring this property on a task is rejected in the open-source edition.

Definitions
assetFailureBehaviorstring
Possible Values
IGNOREFAILWARN

Asset failure behavior

Behavior applied to the task state when a declared asset fails to render, emit, or be persisted (e.g. a lock conflict): FAIL escalates it to FAILED, WARN (default) warns it if it would otherwise succeed, IGNORE leaves the state untouched.

enableAutobooleanstring

Whether to auto-register assets referenced dynamically at runtime that are not statically declared in inputs or outputs.

inputsarray

The assets consumed as inputs.

id*string
Min length1
typestring
outputs

The assets produced as outputs.

id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*string
Min length1

Custom asset type

descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
Defaulthttps://datastudio.googleapis.com/v1

API base URL

Data Studio API root. Defaults to https://datastudio.googleapis.com/v1.

DefaultFETCH
Possible Values
STOREFETCHFETCH_ONENONE

Fetch type

FETCH returns every member in the execution context. FETCH_ONE returns the first member. STORE writes an Ion file of members to internal storage. NONE returns only the count.

Service account JSON

Google service account key JSON. Read tasks request https://www.googleapis.com/auth/datastudio.readonly. Add and Revoke request https://www.googleapis.com/auth/datastudio. Grant the scope through domain-wide delegation in a Google Workspace or Cloud Identity organization. Use this or accessToken.

Delegated user

Workspace user email the service account impersonates. Required for domain-wide delegation. Ignored when accessToken is set.

Defaulthttps://oauth2.googleapis.com/token

Token URI

OAuth token endpoint used to exchange a service account JWT.

First member

Set only when fetchType is FETCH_ONE.

Definitions
memberstring

Member

Member identifier such as user: ada@acme.com or group: analysts@acme.com.

rolestring

Role

OWNER, EDITOR, VIEWER, LINK_EDITOR, or LINK_VIEWER.

Members

Set only when fetchType is FETCH. Each member includes its role, so the role map is not repeated.

Definitions
memberstring

Member

Member identifier such as user: ada@acme.com or group: analysts@acme.com.

rolestring

Role

OWNER, EDITOR, VIEWER, LINK_EDITOR, or LINK_VIEWER.

Number of members

Formaturi

Internal storage URI

Ion file of members. Set only when fetchType is STORE.