Capabilities
Provisioning
AccessOwl creates user accounts with the specified roles/permissions during access requests.
Deprovisioning
AccessOwl removes users from your Tableau Cloud site during access revocations.
Prerequisites
- Site administrator access to your Tableau Cloud site, so you can add the integration account.
- An available Explorer license for the integration account, since the Site Administrator Explorer role consumes one.
Setup
Add Tableau in AccessOwl
Either add a new application or open Applications and click the +-symbol, then continue.
Add the integration account as Site Administrator Explorer
AccessOwl shows you the integration account’s email address. In Tableau Cloud:
- Select Users in the left navigation.
- Click Add Users, then Add Users by Username.
- Enter the integration account’s email address.
- Set the site role to Site Administrator Explorer.
- Click Add Users.
The integration account needs Site Administrator Explorer because site administrators can add users and assign site roles on Tableau Cloud. It has the same user management capabilities as Site Administrator Creator while consuming the cheaper Explorer license.
FAQ
A user could not be fully removed from Tableau
A user could not be fully removed from Tableau
Tableau cannot remove a user who owns content such as projects, workbooks, views, or data sources. Instead, Tableau sets their site role to Unlicensed. To fully remove them, reassign their content first (open Explore, select the content, then Actions and Change Owner) and retry. Note that reassigning content with embedded credentials deletes those credentials, so the new owner must re-authenticate the connections.
The provisioned user appears with a period before their email
The provisioned user appears with a period before their email
Until a newly added user completes signup, Tableau shows their entry as the email address preceded by a period. They cannot use the site until they finish creating their account.