Once you have a site created follow the directions below to import them to Tableau. Any imported AD group is synced nightly so users who are added or removed from the group also gain or remove access to the dashboards and datasources. 

Import groups in the Michigan Medicine Site:

In the Michigan Medicine site all UMHS employees are already imported, but not all groups. If there is an active directory group you would like added please fill out the form. Details are available here in KB0011755.

Import groups in all other Sites:

Contact Your Site admin(s). They will need to import groups. A list of sites and admins is available here. They can also create local groups, though we usually discourage this practice. Site Admins also have the ability to promote other users to Site Admin status.

Who can manage permissions?

Permissions can be assigned to Workbooks, Views, and Datasources when they are published to the Tableau Server. They can also be changed later through the Tableau Server web interface. Remember that permissions are inherited from the Project the object is being published into, but they can be overridden (there is an option to prevent this that Admins can set). Permissions are set by the owner/publisher of the object, so they need to be careful to make sure they aren't granting permission to those who should not have it. 

How do I create new AD groups?

New group requests can be done via the Service Catalog. You can also use the Identity Management tools to edit the group members once they are created. You can also make the group available for email. This makes a handy way to communicate with consumers of your content. 

Group Name Changes

Tableau Server looks for groups by name, so if the name changes it will fail to sync the members. If you change the name of a group you will need to also:

1. Import the new name into Tableau Server
2. Update your permissions. You can use this dashboard to look at permissions granted to a group
3. Request the group be removed from Tableau Server. 

 

Best Practices

Here are some tips for managing permissions for Site/Server Admins and Publishers:

• Use existing or create new AD groups to manage access and for email communications.
• Setup and customize projects to help publishers preset the permissions. 
• The "Default" project is used as the template for new projects. Customizing it can save time. 
• Consider locking permissions on projects to prevent accidental access. 
• Consider removing the "All Users" group from project permissions. This represents all the users on a Tableau Site. It can come in handy, but use with caution.