[FIXED] How to securely embed a private Google Data studio report without a user needing a Google account

Issue

Is there any way to embed a private report (i.e. Link-Sharing set to OFF) in a site where the user does not have to be signed in to a Google account which has view permissions on the report? I understand from this piece of documentation that a private report can be viewed in an iframe only if the viewer is currently signed into a Google account which the report has been shared with.

This is not a feasible option in this case, and it comes down to two factors:

1. The client requires complete security of their reports.

2. The client, due to security reasons within their company, cannot create or use a Google account.

This means the only solution is for a 'service' type Google account to be created which authenticates with Google from within the application side of things, without relying on user input.

I guess that the document that loads within the iframe looks for a Google authentication cookie in the browser session of the user in order to authenticate access, so this seems like something that cannot be injected by the server or automated on the client (correct me if I'm wrong). Plus any kind of attempt to script a login through the iframe will result in some cross domain issues.

So, if there is some sort of official authentication technique which can achieve what I'm looking for, and have managed to overlook, it would be great if somebody could point that out! If not, if anyone has any ideas on a less neat and tidy way of doing this, I'd be equally as grateful!

Thanks

Solution

You can not share an active/live dashboard but you can deliver a password protected version of you report via PDF. To the farthest left of the "Edit" button you´ll see the "Download Report" feature.

Answered By - Alejandro Sabanero

Answer Checked By - Terry (PHPFixing Volunteer)