Summary

Individual Tableau users can be organized into Tableau Groups. These groups are set up to differentiate between which sets of users have access to specific data in Tableau. There are three default Tableau Groups - Admin, Power Users, and All Users.

NOTE: If you don't see the Tableau Group Maintenance option in SS> Web Maintenance, please confirm your menu security settings permit you to view the new menu item.

Step by Step

• Open the Tableau Groups Maintenance window (SS> Web Maintenance> Tableau Groups).  
• The standard Tableau Groups are Admin, Power User, and All Users. Each group is set up with a default set of permissions that will affect how users in that group can access and interact with the data in Tableau.
  • Tableau uses a "least restrictive" user group permission system. This means a user in both the Power User and the All Users group will be granted the permissions commensurate with the Power User group, which is less restrictive than the All Users group.
  • Users in the Admin group have the highest level of access to Tableau. Springbrook recommends only one or two users at an organization be added to the Admin group. Users in this group will have the following permissions:
    • Springbrook Standard Reporting folder workbooks:
      • View
      • Download
    • Agency folder workbooks:
      • View
      • Edit
      • Delete
      • Upload
      • Overwrite
      • Create
      • Set permissions on workbooks and views
    • Datasources folder:
      • View
  • Users in the Power User group have a level of access that is similar to the Admin level when accessing data and building or editing workbooks. However, Power Users cannot set user permissions on workbooks and views within Tableau. This user group should be reserved for those users who are very familiar with Springbrook data and who are expected to create reports for other users to consume. Users in the Power User group have the following permissions:
    • Springbrook Standard Reporting folder workbooks:
      • View
    • Agency folder workbooks:
      • View
      • Edit
      • Delete
      • Upload
      • Overwrite
      • Create
    • Datasources folder:
      • View
  • The All Users group is the default user group and includes every Tableau user in Springbrook. As this is the default folder for all users, a user cannot be removed from this group. Users who are only in this user group have much more limited access to the data in Tableau. This group should be reserved for those users who consume reports but are not expected to create them. Users in the All Users group have the following permissions:
    • Springbrook Standard Reporting folder workbooks:
      • No access
    • Agency folder workbooks:
      • View
    • Datasources folder:
      • No access
• Only Admin users can edit user and group permissions in Tableau. Because Tableau does not inherit database and field security settings from Springbrook, it may make sense for an organization admin to review the specific data access permissions for their Tableau users.
• Click on an Expand button next to the Tableau group to view the users attached to group.
• Click the Add User icon   to add a user to the selected Tableau group. This will open a list of Tableau users to select from.
  • Users will be automatically added to the All Users group when they are created in the Tableau User window.
• Highlight a user and click the Remove User icon   to remove the selected user from the Tableau group.
  • Users cannot be removed from the All Users group. In order to remove a user from all groups, that user must be deleted on the Tableau Users window (SS> Web Maintenance> Tableau Users).
• While the standard set of Tableau groups are set to the permissions outlined above, the Tableau admin at your organization can edit user and group permissions within Tableau to help differentiate data permissions on individual Tableau reports.
  • For more information on setting and maintaining permissions in Tableau, please see the Tableau help article Permissions.