TABLEAU SERVER AND CLOUD SECURITY (2/10): external site

It is not uncommon to share your Tableau dashboards to your vendor users or partner users, like vendor performance KPI data. To avoid surprises, it is better for vendors to know exactly how your company evaluates their specific business process metrics, Tableau can be a perfect tool for it. All it needs is to grant … Continue reading TABLEAU SERVER AND CLOUD SECURITY (2/10): external site

Project (3/10) : Project Leader/owner and their site role

My previous blog PROJECT (2/10) : Project Leader’s permission details out all activities can be done by project leader or owner assuming that project leader/owner have the creator or explorer (can publish) site roles. Site role is another very confusing but important Tableau concern. Project leader/owner vs site role Site role defines the maximum level … Continue reading Project (3/10) : Project Leader/owner and their site role

SCALING TABLEAU (4/10) – USE SITES

Tableau server has a multi-tenancy feature called “sites” which can be leveraged by enterprise customers for better scalability, better security and advanced self-service. This blog covers following areas about Tableau sites: Basic concepts Common use cases Governance processes and settings When should not create a new site 1. Basic concepts about Tableau sites Let’s start with some basic concepts. Understanding … Continue reading SCALING TABLEAU (4/10) – USE SITES

TABLEAU SERVER AND CLOUD SECURITY (10/10): Trade Secrets

My previous post TABLEAU SERVER AND CLOUD SECURITY (9/10): PII and DETECT AND DELETE PII DATA ON TABLEAU SERVER talk about PII detection and deletion scripts. Why and how. There is another type of concerns related to compartmented secret information on Tableau server got out of hands, like future products, or trade secrets etc. How … Continue reading TABLEAU SERVER AND CLOUD SECURITY (10/10): Trade Secrets

TABLEAU SERVER AND CLOUD SECURITY (9/10): PII

Is Personal Identifiable Information (PII) data Ok on Tableau server? Yes and no, depends on your organization policy: Does your org have PII policy and classifications? Do you allow PII data on your server or Cloud site?  How to identify Tableau workbooks using PII? How to govern PII on Tableau server? In my organization, we … Continue reading TABLEAU SERVER AND CLOUD SECURITY (9/10): PII

TABLEAU SERVER AND CLOUD SECURITY (7/10): All Users group

Tableau Cloud or server has one built-in user group : All Users. It is group available in any site. All Users can be very connivence for content that can be shared to every Cloud or server user. However in large organization, it likely ends up a lot excess permissions. I used to receive emails asking … Continue reading TABLEAU SERVER AND CLOUD SECURITY (7/10): All Users group

TABLEAU SERVER AND CLOUD SECURITY (6/10): Conten Owner left company

What should be done when Tableau server or Cloud users left company? The right process is to un-license AND then delete the users from Tableau server or Tableau when users left company. Admins can un-license content owners but Admins can’t delete users who own content even the users left company. You will have to change … Continue reading TABLEAU SERVER AND CLOUD SECURITY (6/10): Conten Owner left company

TABLEAU SERVER AND CLOUD SECURITY (5/10): Explain Data & DatA story

My last post talked about Dashboard Extension security, in short, Sandboxed extensions are safe to use while network extensions are not safe to use. This blog focuses Explain Data and Data Story security concerns. Is Explain Data safe to turn on for the server or site? Yes Explain Data Concerns: It may expose data in … Continue reading TABLEAU SERVER AND CLOUD SECURITY (5/10): Explain Data & DatA story

TABLEAU SERVER AND CLOUD SECURITY (4/10): Extension

At high level, there are two types of Tableau extensions: Dashboard Extension: Do things you wish Tableau did easily but does not and those features are developed by 3rd parties: Sandboxed: Tableau hosted, run in a protected environment without access to any other resources or services on the web (Safe to use) Network: Anyone can … Continue reading TABLEAU SERVER AND CLOUD SECURITY (4/10): Extension

TABLEAU SERVER AND CLOUD SECURITY (3/10): EXTERNAL Server

My previous post shared one recommended setup to segment all external users to one Limited Visibility site that is a great balance between security and on-going maintenance. For some organizations that do not allow mixed internal and external users in one Tableau server at all, there is option to setup dedicated External Server: Two separated … Continue reading TABLEAU SERVER AND CLOUD SECURITY (3/10): EXTERNAL Server

Tableau Server and Cloud Security (1/10): Overview

This serial is about the Tableau server and Tableau Cloud security. Tableau has a Platform Security white paper that covers Authentication, Authorization, Data Security and Network Security. It is a good documentation, however I find that it is hard to explain to non-tech audiences about those security components. Instead, I created the following security model … Continue reading Tableau Server and Cloud Security (1/10): Overview

What is view acceleration?

Updated Nov 2023: After one year of initial View Acceleration release, Tableau released new View Acceleration Recommendation feature, which makes the View Acceleration much more user friends. What happened is there are too many scenarios that View Acceleration is not supported (like live connection, view has user filter or role level security, or view render … Continue reading What is view acceleration?

PROJECT (4/10) : Sub-project or nested project

Tableau’s nested project feature has been there since v10.5, however I only start to see more people to use it after v2020.1’s new lock permission feature – allowing permissions being locked independently at any nested project. This blog focuses on nested project features and next blog will talk about how lock works with nested project. … Continue reading PROJECT (4/10) : Sub-project or nested project

PROJECT (2/10) : Project Leader’s permission

My previous blog Project (1/10) : Differences between Project Leader and owner talked about differences between project leader and project owner. This blog details out the permission details that project leader has. Before dive into details what project leaders are allowed to do, remember this golden rule – project leader and owner got all the … Continue reading PROJECT (2/10) : Project Leader’s permission

GOVERNED SELF-SERVICE ANALYTICS: PUBLISHING (6/10)

The publishing process & policy covers the followings areas:  Engagement Process; Publisher Roles; Publishing Process and Dashboard Permissions. First step is to get a  space on the shared enterprise self-service server for your group’s data and self-service dashboard, which is called Engagement Process. The main questions are: From requester perspective, how to request a space … Continue reading GOVERNED SELF-SERVICE ANALYTICS: PUBLISHING (6/10)

Governed Self-Service Analytics: Data Governance (8/10)

I was in the panel discussion at Tableau Conference 2015 about self-service analytics to a group of executives. Guess what is the no.1 most frequent asked question – data governance. How to make sure that data not get out of hands? How to make sure that the self-service analytics does not break the existing organization’s … Continue reading Governed Self-Service Analytics: Data Governance (8/10)

Governed Self-Service Analytics: Performance Management (7/10)

Performance management has been everyone’s concerns when it comes to a shared self-service environment since nobody wants to be impacted by others. This is especially true when each business unit decides their own publishing criteria where central IT team does not gate the publishing process. How to protect the shared self-service environment? How to prevent … Continue reading Governed Self-Service Analytics: Performance Management (7/10)

Governed Self-Service Analytics: Multi-tendance (5/10)

Tableau has a multi-tendance strategy which is called site.  I heard many people asking if they should use site, when should use site. For some large Tableau deployment,  people also ask if you have created separate Tableau instances. All those are Tableau architecture questions or multi-tendance strategy.   How do you approach this? I will use … Continue reading Governed Self-Service Analytics: Multi-tendance (5/10)

Tableau Server New Stale Content Feature

Tableau v2020.3 released a super useful  Tag ‘Stale Content’ feature.  There are two big use cases:  content archiving and stop extract refresh schedule for stale content. How it works? How to automate the workflow? ‘Stale Content’ for server/site admins Tag ‘Stale Content’  Automate archiving workflow Move or delete ‘Stale Content’ Automate ‘Stale Content’ notification  1. ‘Stale Content’ for server/site admins ‘Stale Content’ feature actually … Continue reading Tableau Server New Stale Content Feature

How ‘Automatically Suspend Extract Refresh Tasks’ Works?

Tableau v2020.3 released a super useful feature for Tableau server admins – Automatically Suspend Extract Refresh Tasks for inactive workbooks.  This blog explains how it works. Why suspend extract refresh for inactive content?  You may be surprised that how many of extracts are running daily or hourly while nobody actually uses the dashboards for the post month (I heard … Continue reading How ‘Automatically Suspend Extract Refresh Tasks’ Works?

Governed Self-Service Analytics: Community (4/10)

Self-service analytics community is a group of people who share the common interest about self-service analytics and common value about data-driven decision-making culture. Why people are motivated for the internal self-service community? The self-service community motivations are as followings: Empowerment: Self-service stems from – and affects – a wider macro trend of DIY on one … Continue reading Governed Self-Service Analytics: Community (4/10)

Advanced Deployment (10/10) : Desktop & Prep Deployment in enterprise

I wanted to close this advanced deployment series with Desktop and Prep Builder enterprise deployment approach : how to let users to get Desktop & Prep installed and activated automatically with a single package.  My installer has the following features: Install Desktop Install Prep Activate and register Desktop and Prep license Get Desktop reporting setup Customize the Desktop settings, for … Continue reading Advanced Deployment (10/10) : Desktop & Prep Deployment in enterprise

Advanced Deployment : Make VIP extract priority stick

I have a very popular blog about extract priority already : SCALING TABLEAU (2/10) – SET EXTRACT PRIORITY BASED ON DURATION.  It  increased  70-80% efficiency on my server. Today’s blog is for different use case –  VIP extracts. Do you have VIP extract priority ask? How to handle it if you have business requirement to keep a few mission … Continue reading Advanced Deployment : Make VIP extract priority stick

Advanced Deployment – Turn off Ask Data for large data source

Ask Data’s entry point is the published data sources. By default, Ask Data is ON  and Data source analysis (Ask Data indexing) is  triggered by user request for ALL published data sources. What it means is that even the user did not intend to use Ask Data when come to the published data source (like to see refresh schedules, or check when … Continue reading Advanced Deployment – Turn off Ask Data for large data source

Advanced Deployment – Create Internal Tableau Extension Gallery

This blog series are advanced deployment techniques that will give you some ideas what actually can be done with Tableau server and Desktop. I’d like to share how we did the followings in our Tableau implementation: Internal Tableau Extension Gallery Controlled publishing Run FileStore on Network Storage ‘Incremental’ backup Customize Tableau Portal with alert feature Custom … Continue reading Advanced Deployment – Create Internal Tableau Extension Gallery

Automation – How to make some workbook cache shorter than others

You wish that live connection workbook’s cache can be much shorter than workbook with extracts. You also wish that cache level can be controlled at each data source or workbook. Unfortunately Tableau server does not have those features yet. One Tableau server has only one cache policy – all workbooks have the same length of cache….. … Continue reading Automation – How to make some workbook cache shorter than others

Automation – Data Source Archiving

If you follow my previous blog Automation – Advanced Archiving  to archive workbooks,  overtime you may also need to archive data sources. Why delete data sources? If the workbook has embedded data sources, the embedded data will be deleted when the workbook is deleted. However if the workbook has separate published data sources, when the workbook is … Continue reading Automation – Data Source Archiving

Automation – Remove Permissions for Slow Render Workbooks

My previous blog talks about sending automated alert (VizAlerts) for slow render workbooks, this blog will show you how to  enforce timeout or other government rules for slow render workbooks. Problem statement: Slow workbook alert  is important and absolutely necessary. However sometimes the alerts and email renders are not good enough – what if some workbook owners … Continue reading Automation – Remove Permissions for Slow Render Workbooks

Automation – Remove any permissions for All Users group

Tableau server has a built-in All Users group in each site.  It consists of all users as it is named. It can be useful when you need to share content to all users. However we found that All Users group is a really bad feature for large enterprise server  – it is too easy for content owners to … Continue reading Automation – Remove any permissions for All Users group

Automation – Advanced Archiving

My previous post (Automation – Set Usage Based Extract Schedule) provides a practical server governance approach that re-schedules self-service publisher’s extracts based on workbook usage automatically. This blog talks about handling old workbooks that nobody uses anymore over a period of time.  The keyword is archiving. Many server admins are doing archiving. The tips and tricks in … Continue reading Automation – Advanced Archiving

FEATURE ADOPTION – HOW TO SET UP SERVER CACHE

Updated Jan 2024: Cache is one of the most confusing things on Tableau server.  The blog is trying to answer the following questions: How Tableau server cache works? What are the server settings to control cache expiration? Would cache be refreshed after extract refresh? Does cache work for both live connections and extracts the same way? … Continue reading FEATURE ADOPTION – HOW TO SET UP SERVER CACHE

FEATURE ADOPTION – DASHBOARD EXTENSIONS

The good: Dashboard extensions give you the ability to interact with data from third-party applications directly in Tableau. Capabilities like write-back to a database, custom actions, and deep integration with other apps are all at your fingertips.

The bad: Dashboard extensions also means potential data vulnerability when third-party extension used even on Desktop alone :

  • Extension can access workbook’s summary data by default and full data with additional confirmations.
  • Extension can access the user’s IP address, Tableau Desktop or browser versions, screen resolution, and device type.

How to adopt Dashboard Extensions at large enterprise?

  1. Extension for Desktop:
    • Extension should be turned off by default on Desktop if your company controls user  Desktop installation
    • Some super technical Desktop users can turn extension on by themselves. Read here for details.
  2. Extension for Server :  Tableau server should have the following policy enforced:
    • Unknown extensions can’t run on Tableau server – this is the most important setting. Similar as guest account should be turned off by default, this enable unknown extension should be off by default.
    • Unfortunately you will have to do this for every single site – even your default site turned this off, newly created site will still have this default checked. Please vote IDEA
    • Every extension has to be
      added to the safe list by server adminsextension_setting
    • Hopefully server admins have policy to add only https://*.company.com/xxx URL can be in safe list. It means that third-party extension has to be hosted on-premise before it can be used.
  3. Extension Gallery :
      • Some people may not agree with me here. For me, any third-party extensions is unsafe since they can change extension definition without your knowledge, includes those from Extension Gallery from official Tableau website
      • The secure approach requires all extensions hosted in your company’s web server.
      • From high level, extension is not safe if it is hosted outside your company. Extension is considered ‘safe enough’ if it is hosted within your company’s firewall.
      • Large enterprise should consider to create your own extension gallery for your publishers to share their extensions within your firewall.

Watch the webinar for the recommend settings and Tableau’s plan to make Extensions inherently secure – short term, mid-term and long term.

FEATURE ADOPTION – PRE-COMPUTE WORKBOOKS VIEWED RECENTLY

Tableau 10.3 has a big feature for server admins:  Automatic query caching refresh after extracts which is also called: Pre-compute workbooks viewed recently.  It is a new flag that can be enabled for each site without downtime.  My Tableau server uses a lot of extracts, after we enabled this feature, the overall server render time improved 20% for all … Continue reading FEATURE ADOPTION – PRE-COMPUTE WORKBOOKS VIEWED RECENTLY

Feature Adoption – Lock Project Permission

Lock project permission is a great Tableau server feature. This blog cover the followings: What is lock permission Why lock permission Who can lock/unlock How it works for nested project What is Lock Permission? Locked project permission means that all workbooks and data sources in this project always use the default permission from project level. … Continue reading Feature Adoption – Lock Project Permission

Feature Adoption – Project Leader

If you feel that you did not understand what Tableau project leaders can do, you are not alone.  Hope this blog will give you some clarity on what project’s privileges are and how to leverage them to enable more self-service. Project leader’s  privileges  for the workbooks and data sourced published to  the project and all its sub-projects: Change extract … Continue reading Feature Adoption – Project Leader

SCALING TABLEAU (10/10) – ARCHITECTURE & AUTOMATION

I’d like to complete my scaling Tableau 10 serial blogs with architecture and automation topic. If you follow the tips/approaches in this scaling Tableau 10 serials and governance self-service 10 serials, you should not have any problems to deploy Tableau at enterprise with thousands of Desktop publishers on a few hundred core server cluster that supports ten thousand extracts/day, … Continue reading SCALING TABLEAU (10/10) – ARCHITECTURE & AUTOMATION

SCALING TABLEAU (8/10) – LEVERAGE V10 FEATURES FOR ENTERPRISE

I love Tableau’s path of innovations. Tableau v10 has some most wanted new capabilities to enterprise customers. I have mentioned some of those features in my previous blogs. This blog summarizes V10 enterprise features: Set Extract Priority Based on Extract Duration.   This is a very powerful v10 feature for server admin although it is not mentioned … Continue reading SCALING TABLEAU (8/10) – LEVERAGE V10 FEATURES FOR ENTERPRISE

SCALING TABLEAU (7/10) – UNDERSTAND SERVER PERMISSIONS

When I think about Tableau permissions, I have two words: Robust –  Tableau’s permission features are very comprehensive and robust. Definitely enterprise grade. Confusion – On the other side, Tableau’s permission is kind of confusing  since it has too many different variables to set permissions. To understand permissions, let’s start by looking into structures within Tableau server. … Continue reading SCALING TABLEAU (7/10) – UNDERSTAND SERVER PERMISSIONS

Scaling Tableau (1/10) – version control and revision history

Tableau released one of the most wanted server features – version control and revision history in V9.3. Then this feature is  much more enhanced in V10 with previewing old workbook,  one click restoring, and maximum revisions setting. I love all of those new V10 features: The workbook previewing and restoring features are so convenience for publishers. The … Continue reading Scaling Tableau (1/10) – version control and revision history

Tableau Data Extract API, Tableau SDK and Web Data Connector

If you are confused about Tableau Data Extract API, Tableau SDK and Web Data Connector, please read this blog. Tableau Data Extract API, introduced in v8, is to create binary TDE files from data sources. You can use C, C++, Java or Python to code the Extract API that generates TDE files. Tableau v9.1 incorporated … Continue reading Tableau Data Extract API, Tableau SDK and Web Data Connector

Scaling Tableau

    Tableau Server and Cloud Security Serials: Security (1/10): Overview: Security Model: Infra, App Config, Governance and Permission Security (2/10): External Site: Separate external users into a separate site and set limited visibility Security (3/10): External Server: Separate server outside firewall approach Security (4/10): Extension : Sandboxed extension safe to use Security (5/10): Explain Data … Continue reading Scaling Tableau

NetApp’s Tableau enterprise deployment added 2,500 users in less than 10 months

NetApp’s presentation about Tableau enterprise deployment is well received at Tableau conference 2015 Las Vegas – Survey shows 4.5 out of 5 on contents and 4.3 out of 5 for speaker presentation. The key success factors for large scale Tableau server deployment are: 1. Create enterprise Tableau Council with members from both business and IT. … Continue reading NetApp’s Tableau enterprise deployment added 2,500 users in less than 10 months