> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tableau

AccessOwl integrates with Tableau Cloud to provision and deprovision user access on your Tableau site.

## Capabilities

<CardGroup cols={2}>
  <Card title="Provisioning" icon="user-plus">
    AccessOwl creates user accounts with the specified roles/permissions during access requests.
  </Card>

  <Card title="Deprovisioning" icon="user-minus">
    AccessOwl removes users from your Tableau Cloud site during access revocations.
  </Card>
</CardGroup>

## Prerequisites

* Site administrator access to your Tableau Cloud site, so you can add the integration account.
* An available **Explorer** license for the integration account, since the Site Administrator Explorer role consumes one.

## Setup

<Steps>
  <Step title="Add Tableau in AccessOwl">
    Either add a new application or open Applications and click the +-symbol, then continue.
  </Step>

  <Step title="Add the integration account as Site Administrator Explorer">
    AccessOwl shows you the integration account's email address. In Tableau Cloud:

    * Select **Users** in the left navigation.
    * Click **Add Users**, then **Add Users by Username**.
    * Enter the integration account's email address.
    * Set the site role to **Site Administrator Explorer**.
    * Click **Add Users**.

    <Note>
      The integration account needs Site Administrator Explorer because site administrators can add users and assign site roles on Tableau Cloud. It has the same user management capabilities as Site Administrator Creator while consuming the cheaper Explorer license.
    </Note>
  </Step>
</Steps>

## FAQ

<AccordionGroup>
  <Accordion title="A user could not be fully removed from Tableau">
    Tableau cannot remove a user who owns content such as projects, workbooks, views, or data sources. Instead, Tableau sets their site role to Unlicensed. To fully remove them, reassign their content first (open Explore, select the content, then Actions and Change Owner) and retry. Note that reassigning content with embedded credentials deletes those credentials, so the new owner must re-authenticate the connections.
  </Accordion>

  <Accordion title="The provisioned user appears with a period before their email">
    Until a newly added user completes signup, Tableau shows their entry as the email address preceded by a period. They cannot use the site until they finish creating their account.
  </Accordion>
</AccordionGroup>
