Understanding Tableau Server Permissions

To explain Tableau Server’s permissions and provide best practices. 

Access to the university’s Tableau Server must be requested. For more information on requesting an account, please visit Tableau FAQs. 

Once you have access to Tableau Server, permissions determine how you interact with content such as workbooks and data sources. Permissions are made up of capabilities which are the ability to perform actions such as view content, filter, web edit, download data sources, or delete content. Each content type has specific capabilities. 

Below are recommended templates to set for the desired outcome. 

For additional information, please visit:

• Tableau’s documentation on capabilities
• Interworks’ complete guide to permissions

Best Practices

• Set permissions at the group level – not at the individual level. This will make it easier to troubleshoot. 
• Leverage locked asset permissions. Locked asset permissions may be set at any project level and cascade to all content. This reduces time troubleshooting as there is only one place the administrator needs to check. If you’re new to Tableau permissions, start with locked asset permissions; these may be changed as you grow more comfortable. 
• If you’re unsure about someone’s access, use the effective permissions search at the bottom of the permissions screen. 
• Audit group members annually. The Group Email List dashboard displays all group members and CCH6. 
• Incorporate Tableau access into the on-boarding and off-boarding processes. Tableau Server access is not automatic. Easy ways to make sure new hires have the correct access, is to incorporate it into on-boarding with HR or IT (it’s especially easy if IDP training is required). 
  • Access may be requested by individuals via ServiceNow or a bulk request may be submitted in ServiceNow with the bulk request template.