Omni User Management at Scale with omni-user-manager

You've migrated to Omni. The models are clean, the dashboards are fast, and your analysts love the spreadsheet-like exploration. Now you need to onboard 200 users with the right roles and permissions — and Omni's admin UI is designed for managing users one at a time.

Hawkfry Group — one of the leading Omni Analytics consultancies — built an open-source solution: omni-user-manager. We partner with Hawkfry regularly and have used this tool across multiple Omni deployments. Here's what it does and why you need it.

---

The Problem

Omni's admin interface handles basic user management well for small teams. But when you're:

• Onboarding an entire department (50+ users) during a Looker-to-Omni migration
• Syncing users from an identity provider (Okta, Azure AD, Google Workspace)
• Managing role changes as team structures evolve
• Offboarding users and cleaning up their permissions promptly
• Auditing access across hundreds of users for compliance

...clicking through a UI for each user isn't viable.

What omni-user-manager Does

The tool provides programmatic user management through Omni's API:

Bulk User Provisioning

Import users from a CSV or sync from your identity provider. Define roles, permissions, and group memberships upfront, then provision everyone in a single run.

email,first_name,last_name,role,groups
analyst1@company.com,Sarah,Chen,Analyst,"Marketing,Core"
analyst2@company.com,James,Park,Analyst,"Sales,Core"
admin1@company.com,Maria,Lopez,Admin,"All"
viewer1@company.com,Tom,Wilson,Viewer,"Executive"

One command provisions all users with the correct roles and group memberships. No clicking through forms.

Role and Permission Management

Map your organizational roles to Omni permission sets:

• Admin — Full platform access, model editing, user management
• Developer — Model editing, topic creation, SQL workbench access
• Analyst — Exploration access, dashboard creation, spreadsheet features
• Viewer — Dashboard viewing only, no exploration

The tool enforces these mappings consistently. When someone's role changes in your HR system, update the CSV and re-run — their Omni permissions update automatically.

User Lifecycle Automation

Automate the entire user lifecycle:

1. Onboarding: New hire gets added to your identity provider → synced to Omni with correct role and groups
2. Role changes: Promotion or team change → update role mapping → permissions adjust
3. Offboarding: Employee departure → deactivate in Omni → audit log updated

Access Auditing

Generate reports showing:

• Who has access to what
• Which users haven't logged in for 90+ days
• Role distribution across the organization
• Group membership summaries

These reports feed directly into compliance workflows (SOC 2, GDPR user access reviews).

Why This Matters for Migrations

If you're migrating from Looker to Omni, user management is a critical piece that's easy to overlook. You need to:

1. Map Looker roles to Omni roles — Looker's permission sets (Admin, Developer, User, Viewer) need equivalents in Omni
2. Preserve access patterns — if a user could see the Sales model in Looker, they should see the Sales topics in Omni
3. Provision at scale — your Looker instance might have 200-500 users, all of whom need Omni accounts on day one of the cutover
4. Audit the mapping — demonstrate to stakeholders that nobody lost access and nobody gained access they shouldn't have

omni-user-manager handles all of this programmatically.

Getting Started

# Clone the repository
git clone https://github.com/Hawkfry-Group/omni-user-manager.git
cd omni-user-manager

# Install dependencies
pip install -r requirements.txt

# Configure your Omni API credentials
cp .env.example .env
# Edit .env with your Omni API key and instance URL

# Import users from CSV
python manage.py import --file users.csv

# Audit current users
python manage.py audit --output audit_report.csv

The tool is well-documented, actively maintained, and used in production by multiple Omni customers. If you run into issues, Hawkfry Group provides support through their GitHub Issues and their consulting practice.

Our Partnership with Hawkfry Group

Labs4Change and Hawkfry Group partner on Omni implementations and migrations. They bring deep Omni platform expertise and open-source tooling. We bring Looker migration experience, LookML conversion tooling, and analytics engineering practices.

Together, we cover the full migration lifecycle:

• Labs4Change handles LookML-to-YAML model conversion, data validation, and analytics architecture
• Hawkfry Group handles Omni platform configuration, user management, and ongoing administration

If you're evaluating or migrating to Omni, reach out to us and we'll connect you with the right team for your needs.

---

Labs4Change partners with Hawkfry Group on Omni Analytics implementations. Book a free strategy call to discuss your Omni migration or implementation.