Content security from site to workbook level
Where each security control lives on Tableau Server: site switches for web authoring and Explain Data, project locking and project leaders, ownership and moves, effective permissions for users and groups, published data source access and database authentication modes, and workbook, view, collection and external asset permissions.
2.4 Security: 2.4.1 Describe the security configuration for: 2.4.1.1 Site level, 2.4.1.2 Project level, 2.4.1.3 Group level, 2.4.1.4 User level, 2.4.1.5 Data source level, 2.4.1.6 Workbook level.
~7 min read · 21 practice questions
What the exam expects
- Identify the site settings (Web Authoring, Explain Data availability) that gate a feature before any permission rule matters.
- Choose a project's asset-permissions setting and predict how Default, project leaders, ownership and moves behave.
- Read effective permissions for a user who belongs to several groups or owns the content.
- Decide how a workbook reaches a published data source and which database authentication mode gives per-user security.
- Configure workbook, view, collection and external-asset permissions.
Key terms: asset permissions (a project's Locked or Customizable setting); project leader (a user or group with administrator-like access to one project hierarchy); managing project (the project whose rules govern a locked hierarchy); effective permissions (what a user can actually do after site role, ownership and every rule are evaluated); Connect (the data-source capability to query a published data source).
Key facts
- Detail
- Off means no browser editing, whatever Web Edit says
- Detail
- Unspecified by default; reset to Allowed for 2022.1 workbooks
- Detail
- Copies Default's rules, not its lock; starts Customizable
- Detail
- Only where assigned; rule becomes all Unspecified
- Detail
- By the owner or an administrator, even when locked
- Detail
- Becomes Locked (including nested) and the managing project
- Detail
- A group Deny beats a group Allow
- Detail
- The viewer's own Connect is checked
- Detail
- Needs the editor's own Connect
- Detail
- Alternative to ownership for workbooks and flows only
- Detail
- Per-user database security; avoid user filters
- Detail
- Their permissions grant nothing on linked content
- How many owners and project leaders can one project have?
- Why can't the capabilities in a project leader's rule be edited?
- When does a nested project's permissions dialog lack the Asset permissions Edit link?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Tableau Server Administrator pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 34 lessons of the Tableau Server Administrator guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (21 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both