Landscape and Security in Tableau work in its own unique way as a Self-Service Solution. Governance in Tableau can be based on Data and Content. Data Governance deals with the Data sources, Quality and Security of the data (i.e.) What Data people can see. The Content Governance deals with Content management, Security, Promotion and Consumption (i.e.) What content in Tableau people can view.

Tableau provides a robust way of handling Security and Governance and in this post, we can see some of the best practices in designing a Security Framework.

Best Practices for managing content and security

The following are some of the best practices in managing content and security in Tableau;

  • Use Tableau Site for managing a unique set of users and separate isolated content.
  • Keep Project structure Flat. For E.g., each Department can have a global project and all related sub-projects of the department can be nested inside that.
  • Control Permissions at the Root Project level
  • Use Groups for access control instead of directly providing access to user
  • Nested Project can control permissions only at the root level.
  • Separate Projects based on Audiences and Sensitivity
  • Separate Projects for Development, Quality / UAT and Production

Simplify permissions and workflow for Contentbest-practices-simplified-security-governance-tableauAll the below should be prefixed by Project / Department name for easy identification and management

Project

ProjectPurpose
Personal SandboxSandbox Project where Ad-Hoc Development happens
Ad Hoc WorkbooksAd Hoc Marketing Workbooks
Approved WorkbooksApproved Marketing Workbooks / Production
Approved Workbooks SandboxApproved Workbooks Sandbox / Development
Data SourcesData Sources Project

Groups

GroupPurpose
Ad Hoc Workbook PublishersAd-Hoc Developers
Approved Workbook ApproversApproves content to be published (UAT)
Approved Workbook PromotersPromotes Content from Sandbox to Production
Approved Workbook PublishersDevelop / Publish workbook for the Project
Data Source PublishersPublishes Data Sources / Controls the Data
ViewersTarget Consumers

 

Roles

GroupProjectRole
Ad Hoc Workbook PublishersPersonal SandboxPublisher
Ad Hoc WorkbooksEditor
Data SourcesConnector
Approved Workbook PublishersPersonal SandboxPublisher
Ad Hoc WorkbooksEditor
Approved WorkbooksInteractor
Approved Workbooks SandboxEditor
Approved Workbook ApproversApproved WorkbooksInteractor
Approved Workbooks SandboxInteractor
Approved Workbook PromotersApproved WorkbooksEditor
Approved Workbooks SandboxCustom
Data SourcesConnector
Data Source PublishersData SourcesEditor
ViewersAd Hoc WorkbooksInteractor
Approved WorkbooksInteractor

 

Permissions

All content permissions are currently locked at Root Project

Personal Sandbox

User / GroupPermission
ProjectWorkbooksData Sources
All UsersNoneNoneNone
Ad-Hoc Workbook PublishersPublisherNoneNone
Approved Workbook PublishersPublisherNoneNone

 

Data Sources

User / GroupPermission
ProjectWorkbooksData Sources
All UsersNoneNoneNone
Ad-Hoc Workbook PublishersViewerNoneConnector
Approved Workbook PublishersViewerNoneConnector
Approved Workbook PromotersViewerNoneConnector
Data Source PublishersPublisherNoneEditor

 

Workbook Sandbox

User / GroupPermission
ProjectWorkbooksData Sources
All UsersNoneNoneNone
Approved Workbook ApproversViewerInteractorNone
Approved Workbook PublishersPublisherEditorNone
Approved Workbook PromotersViewerInteractorNone

 

Approved Workbooks

User / GroupPermission
ProjectWorkbooksData Sources
All UsersNoneNoneNone
Approved Workbook ApproversViewerInteractorNone
Approved Workbook PublishersViewerInteractorNone
Approved Workbook PromotersPublisherEditorNone
ViewersViewerInteractorNone

 

Ad-Hoc Workbooks

User / GroupPermission
ProjectWorkbooksData Sources
All UsersNoneNoneNone
Ad-Hoc Workbook PublishersPublisherEditorNone
Approved Workbook PublishersPublisherEditorNone
ViewersViewerInteractorNone

 

Reference

Video by Jason Gorfine and Ryan Stryker is a good source of information https://www.youtube.com/watch?v=BSZfEz5bvTI&feature=youtu.be

Tableau: Modern Governance for Data & Analytics

https://www.tableau.com/enterprise-it/governance

Tableau: Structure Content Projects, Groups, and Permissions

https://onlinehelp.tableau.com/current/guides/everybody-install/en-us/everybody_admin_permissions.htm

 

To learn more about Visual BI’s Tableau Consulting & End User Training Programs, contact us here.

Subscribe to our Newsletter

5920 Windhaven Pkwy
Plano TX 75093.

+1 888-227-2794

+1 972-232-2233

+1 888-227-7192

solutions@visualbi.com