Permissions are made up of capabilities, or the ability to perform a given action on a piece of content, such as view, filter, download, or delete. Each row in the Permission Rules area of the dialog is a permission rule. Permission rules are the setting for each capability (allowed, denied, or unspecified) for the group or user in that row. Permission rules have templates available that make it easier to assign capabilities quickly. Permission rules can also be copied and pasted.
Note: In the permission dialog for projects, there are tabs for each content type: Projects, Workbooks, Data Sources, Data Roles, Flows, Ask Data Lenses, Metrics andâif you have the Data ManagementâVirtual Connections, Databases, and Tables. (Virtual connections were added in Tableau Server 2021.4 and Tableau Cloud December 2021. Databases and tables were added in Tableau Server 2022.3 and Tableau Cloud October 2022.) When a permission rule is added, the default for all capabilities across all content types is Unspecified. To allow or deny capabilities for each content type, you must go to each tab in turn. In the permission dialog for a specific piece of content, there are no tabs and the permission rules only apply to that piece of content.
TemplatesTemplates group sets of capabilities that are often assigned together based on common user scenarios, View, Explore, Publish, and Administer. When you assign a template, its included capabilities are set to Allowed, with the rest left as Unspecified. The templates are cumulative, so the Explore template includes everything from the View template plus additional capabilities. All content also has a template for None (which sets all capabilities to unspecified) and Denied (which sets all capabilities to denied).
Templates are meant to be a starting point and can be adjusted after they are applied. Capabilities can also be granted or denied without using a template at all. In both cases, the template column then shows Custom.
Copy and paste permissionsIf there is a permission rule that needs to be assigned to multiple groups or users, you can copy and paste from one rule to another. You canât copy from or paste onto a rule that involves Project Leader status.
Each content type has specific capabilities:
ProjectsProjects have only two capabilities and two templates. For more information about project leaders and how to assign them, see Project administration.
View templateView lets a user see the project. If a user hasnât been granted the view capability, the project wonât be visible to them. Granting the view capability for a project does not mean a user can see any content in the project, just the existence of the project itself.
Publish templatePublish lets a user publish content to the project from Tableau Desktop or Tableau Prep Builder. The publish capability is also required to move content into the project or save content to the project from web authoring.
Workbooks View templateView lets a user see the workbook or view. If a user hasnât been granted the view capability, the workbook wonât be visible to them.
Filter lets a user interact with filters in the view, including keep only and exclude filters. Users lacking this capability wonât see filter controls in the view.
View Comments lets a user view the comments associated with the views in a workbook.
Add Comments lets a user add comments to views in a workbook.
Download Image/PDF lets a user download each view as a PNG, PDF, or PowerPoint.
Download Summary Data lets a user view the aggregated data in a view, or in the marks theyâve selected, and download that data (as a CSV).
Explore templateShare Customized lets users add their custom views to the list of âOther Viewsâ visible on a workbook.
Download Full Data lets a user view the underlying data in a view, or in the marks theyâve selected, and download that data (as a CSV).
Web Edit lets a user edit the view in a browser-based authoring environment.
Run Explain Data lets a user run Explain Data on marks in editing and viewing mode.
Download Workbook/Save a Copy lets a user download a packaged workbook (as a TWBX). Lets a user save (publish) a copy from the web edit interface as a new workbook.
Overwrite lets a user overwrite (save) the content or asset on the server.
Create/Refresh Metrics lets a user create metrics on the views in a workbook and lets any metrics that a user creates from those views refresh. The legacy Metrics feature was retired in February 2024 for Tableau Cloud and in Tableau Server version 2024.2. For more information, see Create and Troubleshoot Metrics (Retired).
Administer templateMove lets a user move workbooks between projects. For more information, see Move content.
Delete lets a user delete the workbook.
Set Permissions lets a user create permission rules for the workbook.
Refresh Extracts lets a user trigger an extract refresh for that workbook.
ViewsIn a workbook that is not in a locked project and does not show sheets as tabs for navigation, views (sheets, dashboards, stories) inherit the workbook permissions at publication, but any changes to permission rules must be made on individual views. View capabilities are the same as those for workbooks, except for Overwrite, Download Workbook/Save a Copy, and Move which are only available at the workbook level.
We recommend showing navigational sheet tabs whenever possible so views continue to inherit their permissions from the workbook.
Data Sources View templateView lets a user see the data source on the server.
Connect lets a user connect to a data source in Tableau Desktop, Tableau Prep Builder, Ask Data, or web editing.
Download Data Source lets a user download the data source from the server (as a TDSX).
Overwrite lets a user publish a data source to the server and overwrite the data source on the server.
APIÂ Access lets a user query the data source with the VizQL Data Service. For more information, see VizQL Data Service.
Create Metric Defintions lets a user connect to a data source to create Tableau Pulse metric definitions. For more information, see Create Metrics with Tableau Pulse.
Administer templateDelete lets a user delete the data source.
Set Permissions lets a user create and edit permission rules for the data source.
Refresh Extracts lets a user trigger an extract refresh for the data source.
Other types of assets*By default, virtual connections have a Custom template that sets the View capability to Allowed but not the Connect capability. Be sure to set the Connect capability to Allowed so users can connect using the virtual connection.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4