Design a Tableau Infrastructure22% of the exam
Tableau Cloud Bridge, authentication, SCIM and Cloud Manager
Plan Tableau Cloud around four separate layers: Bridge pools and refresh schedules for private data, site sign-in and connected clients, SCIM provisioning pushed by the identity provider, and multi-site governance in Tableau Cloud Manager, then troubleshoot by isolating the layer that failed.
1.2 Plan and implement Tableau Cloud: 1.2.1 Plan and implement Tableau Bridge; 1.2.2 Plan and implement authentication; 1.2.3 Plan and implement automated user provisioning, including System for Cross-Domain Identity Management (SCIM); 1.2.4 Troubleshoot advanced configuration issues; 1.2.5 Plan and implement multi-sites using Tableau Cloud Manager.
~7 min read · 13 practice questions
What the exam expects
- Plan Tableau Bridge pools and refresh schedules for private-network data, including version and pool prerequisites and who owns which task.
- Plan site authentication: per-user authentication type, MFA, connected clients, and the difference between signing in and reaching a data source.
- Plan automated provisioning with SCIM and its dependencies on single sign-on, the identity provider and the creating site administrator.
- Troubleshoot advanced configuration issues by isolating the layer (sign-in, provisioning, data access, connectivity) that failed.
- Plan multiple sites with Tableau Cloud Manager, separating cloud administrator and site administrator rights.
Key terms:
- Tableau Bridge: a client that refreshes or queries private-network data on behalf of Tableau Cloud.
- Pool: a set of Bridge clients that load-balances refresh work for the private network domains mapped to it.
- Connected client: a Tableau application that reaches a site through a stored refresh token.
- SCIM: the protocol an identity provider (IdP) uses to push user and group provisioning into Tableau Cloud.
- Tableau Cloud Manager (TCM): the cloud administrator's console for the sites and users of a tenant.
Key facts
Schedule owner
- Detail
- Data source owner, on the Extract Refreshes tab
Pools per scheduled published extract
- Detail
- One; multiple pools not supported
Embedded file-based refresh
- Detail
- Bridge 2024.2.1 or later client in a named pool
Unattended Bridge
- Detail
- Requires the site's connected clients option
Unused refresh token
- Detail
- Expires after 14 days
Authentication per user
- Detail
- One type each: Tableau or a configured external provider
Cloud account and data
- Detail
- No automatic access to external data sources
SCIM call frequency
- Detail
- Controlled by the IdP
Tableau-generated SCIM secret
- Detail
- Invalid when its creator's site role changes or the creator leaves
Missing siteRoles
- Detail
- User created as Viewer
Site rename
- Detail
- Updates the URI and invalidates references
Site deletion
- Detail
- Reactivation possible for 30 days
Sources for this section (5)
- Private Network Refresh Schedulehelp.tableau.com (opens in a new tab)
- Access Sites from Connected Clientshelp.tableau.com (opens in a new tab)
- Authenticationhelp.tableau.com (opens in a new tab)
- SCIMhelp.tableau.com (opens in a new tab)
- Add, Rename, Delete, or Activate Siteshelp.tableau.com (opens in a new tab)
- How long can a connected client's refresh token go unused before a new sign-in is needed?
- Why does Tableau recommend a dedicated site administrator account on Tableau with MFA for a SAML site?
- Which Bridge version must at least one pooled client run before file-based published data sources can use Bridge refresh schedules?
- Why can a Bridge legacy schedule fail even though the client is connected?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Tableau Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 18 lessons of the Tableau Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (13 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both