Establish Governance and Support Published Content16% of the exam
Project permissions, locking and content access strategy
Secure content with group rules on locked projects: how effective permissions are evaluated, what locking and changing project rules do, the Default project and All Users, project leaders and owners, why hidden sheets are not security, and how workbook access to a published data source is checked.
Recommend a strategy for securing access to content.
~8 min read · 8 practice questions ·
What the exam expects
- Predict a user's effective permission from site role, ownership or project leadership, user rules and group rules.
- Choose locked or customizable asset permissions, and predict what changing project rules or the lock setting does to existing content.
- Clean up the Default project and the All Users group so new projects start without broad access.
- Delegate content administration to project leaders and owners without granting site settings.
- Reject hidden sheets as a security control, and pick Prompt users or Embed password for a workbook's access to a published data source.
Key terms:
- Capability: the ability to perform one action on content, such as View, Download Full Data or Set Permissions; each is Allowed, Denied or Unspecified in a rule.
- Effective permission: what a user can actually do after site role, user scenarios and every rule are evaluated.
- Asset permissions: the project setting, Locked or Customizable, that decides whether project rules are enforced on content.
- Project leader: a user given their maximum site-role capabilities for a project hierarchy, without site or server settings.
- Default project: the template every new top-level project copies its permission rules from.
Key facts
Unspecified capability
- Detail
- Results in denied
Allow and Deny in two groups
- Detail
- Deny takes precedence
Content owner in a locked project
- Detail
- All capabilities except Set Permissions
Customizable to Locked
- Detail
- Overwrites custom content rules; can't be undone
New top-level project
- Detail
- Copies Default project rules; Asset permissions start Customizable
Who creates top-level projects
- Detail
- Administrators only
Removing project leader
- Detail
- Rule left with all capabilities Unspecified
All Users group
- Detail
- Delete its rule or set it to None
Hidden sheets
- Detail
- Reachable with Download Workbook/Save a Copy
Embed password to a published data source
- Detail
- Viewers see data with the author's access
Collections
- Detail
- Their permissions don't change the content's permissions
- Why does moving a workbook into a locked project change its permissions?
- When a collection is shared, why might two users see different item counts?
- Which special project can't be deleted, moved or renamed?
- Why can a user see a view whose workbook and project they cannot view?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Tableau Consultant pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 38 lessons of the Tableau Consultant guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (8 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both