Starting in version 2023.1, authorized users can migrate workbooks and published data sources with embedded credentials from Tableau Server to Tableau Cloud. Additional configuration is required before migrating with Content Migration Tool.
Note: Content Migration Tool does not support embedded credential migration for OAuth connections. For more information, see Migration Limitations.
OverviewMigrating embedded credentials using Content Migration Tool (CMT) is available when connecting to Tableau Server as the source site and Tableau Cloud as the destination site. Both sites must have an Advanced Management license.
Now that weâve covered the requirements, letâs discuss how migration works. Youâll need to work closely with the Tableau Cloud site administrator and TSM administrator (sometimes the same person) to allow the feature and authorize a site user. After the feature is activated, the authorized site user builds a migration plan and selects the publish options Migrate Embedded Credentials for Workbooks and Migrate Embedded Credentials for Data Sources.
When running the migration plan, all required content credentials are transmitted in an encrypted content manifest from Tableau Server to Tableau Cloud. As CMT publishes content, the destination Tableau Cloud site embeds matched credentials securely from the manifest into the content (workbooks or published data sources). Any problems that occur during migration will appear in the Errors and Warnings tab in CMT. For more information, see Migration Plan Overview.
Allow embedded credential migrationUse the following steps to allow embedded credential migration from Tableau Server to Tableau Cloud.
Tableau CloudOpen a browser window and sign in to Tableau Cloud as a site administrator.
Select Settings > General, and scroll down to Manage Content Migration.
Click Create new key to generate an encryption key pair.
Note: The public key is only displayed once. If you lose the key before completing the configuration, youâll need to generate a new key.
In the resulting window, click Copy to clipboard and then close the window.
Paste the public key to a file and store it in a safe location. The TSM administrator will use the public key to allow migration. You can view the public key expiration date on the Settings page.
Open a command prompt with an account that is a member of the tsmadmin
group on a node in the cluster.
Use tsm security authorize-credential-migration
to allow embedded credential migration to the Tableau Cloud site. For more information, see tsm security.
tsm security authorize-credential-migration --source-site-url-namespace <Tableau Server site ID> --destination-site-url-namespace <Tableau Cloud site ID> --destination-server-url <Tableau Cloud site url> --authorized-migration-runner <username> --destination-public-encryption-key <public key>
Note: When running TSM commands from a remote node, use tsm login
to authenticate a session with the Tableau Server Administration Controller service before running tsm security authorize-credential-migration
.
(Optional) Use tsm security cancel-credential-migrations
to cancel granted authorizations. By default, migration authorization will expire in 7 days or the number of days specified with the --expiration-time-in-days
option.
Open Content Migration Tool and select Create New Plan or Browse for a Plan.
On the Sites page, click Sign in to Tableau, and connect to Tableau Server as the source and Tableau Cloud as the destination. Embedded credential migration is only available when migrating from Tableau Server to Tableau Cloud.
Build your migration plan and select the following Publish Options:
On the Workbook Publish Options page, select Migrate Embedded Credentials for Workbooks. For more information, see Migration Plans: Workbooks.
When you are ready, click Verify & Run to start the migration.
The workbooks and published data sources you selected are migrated to your Tableau Cloud site and should not prompt for authentication. If you experience issues while migrating embedded credentials, see Troubleshooting.
TroubleshootingThis section includes some common migration issues you might encounter and suggestions to resolve them.
There is no option to migrate embedded credentialsYou can only migrate embedded credentials from a Tableau Server to a Tableau Cloud site. Tableau Server and Content Migration Tool must be running versions 2023.1 or later. For more information, see Install Tableau Content Migration Tool.
Migrating embedded credentials failedIn the Errors and Warnings tab of CMT, you may receive an error indicating that migrating the embedded credentials failed. This can occur when the public key used to authorize migration has expired.
As a Tableau Cloud site administrator, go to the Settings page and verify that the public key is valid. Youâll have to create a new encryption pair to authorize the migration if the public key expires. For more information, see Allow embedded credential migration.
Who can do this?Tableau Cloud site administrator and TSM administrator are required to allow embedded credential migration.
The authorized site user must have an Explorer role or higher. They must also have View and Download/Save a Copy capabilities for workbooks on the source site and View and Publish capabilities for target projects on the destination site.
For more information, see Permissions.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4