Webhooks, refresh APIs, extensions and embedded authentication
Automate content work with webhooks, tabcmd refreshextracts, REST refresh and job methods and Hyper update requests; approve dashboard extensions and web data connectors; and make trusted tickets and direct-trust connected apps work in a custom embedded portal.
3.6 Manage server extensions: 3.6.1 Schedule content automation tasks by using webhooks, tabcmd, REST, or Hyper APIs; 3.6.2 Implement and configure dashboard extensions and web data connectors; 3.6.3 Configure trusted tickets and connected apps for a custom embedded solution.
~7 min read · 20 practice questions
What the exam expects
- Schedule and chain content automation with webhooks, tabcmd, the REST API and the Hyper update API, including how a script waits for a refresh.
- Implement and configure dashboard extensions (safe list, block list, data access, prompts) and web data connectors (safe lists, refresh).
- Make trusted tickets work for a custom embedded portal and troubleshoot failed tickets.
- Build and maintain the JWT for a direct-trust connected app, including secret rotation.
Key terms: webhook (an HTTPS POST with a JSON payload sent to your URL when a subscribed event occurs); live-to-Hyper data source (a published data source whose Hyper data can be changed in place by REST requests); safe list (site list of approved extension URLs, or the TSM list of approved WDCs); trusted ticket (a one-time string a trusted web server requests for a user); connected app (a site-level trust between Tableau Server and an external application, proved with a signed JWT).
Key facts
- Detail
- Site administrator; HTTPS URL with valid certificate
- Detail
- After four delivery failures; owner emailed
refreshextracts name- Detail
- Name on the server, not the file name
- Detail
- Fails if the task is queued or in progress
RequestID- Detail
- Duplicates within 24 hours ignored
- Detail
- 100 MB default since 2022.1
- Detail
- HTTPS only, except
http://localhost
- Detail
- Summary data only; prompts shown
- Detail
- Credentials embedded; republish to change
- Detail
- Within three minutes
wgserver.unrestricted_ticket- Detail
- Default false: views only
- Detail
- 10 minutes by default
Sources for this section (9)
- Webhooks starthelp.tableau.com (opens in a new tab)
- Webhook eventshelp.tableau.com (opens in a new tab)
- tabcmdhelp.tableau.com (opens in a new tab)
- Jobs and taskshelp.tableau.com (opens in a new tab)
- Hyper updatehelp.tableau.com (opens in a new tab)
- Extensions on Serverhelp.tableau.com (opens in a new tab)
- WDCs in Serverhelp.tableau.com (opens in a new tab)
- Trusted authenticationhelp.tableau.com (opens in a new tab)
- tsm configuration sethelp.tableau.com (opens in a new tab)
- When must a browser redeem a trusted ticket?
- When do both REST Run Extract Refresh Task and tabcmd refreshextracts fail regardless of the queue?
- Which browser setting must allow trusted authentication with embedded views?
- How long can a script keep using a tabcmd session token?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Tableau Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 18 lessons of the Tableau Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (20 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both