Tableau
Tableau is a data visualization and analysis tool used to create charts, graphs, maps, dashboards, and stories.
Asset Types Fetched
- Users, Application Settings
Before You Begin
Authentication Methods
- User Name and Password, OR
- API Token and Secret
APIs
Axonius uses the following APIs:
Required Permissions
To fetch Users, you must be a server administrator or site administrator.
To fetch Application Settings:
- The Fetch application settings advanced setting must be enabled.
- Required permissions and API endpoints per setting:
| Setting Name | Setting Description | Endpoint | Required Permission | Tableau Cloud | Tableau Server | Documentation Link |
|---|---|---|---|---|---|---|
| enabled | Indicates whether the analytics extension service is enabled. | /api/-/settings/server/extensions/analytics | Server administrator | No | Yes | View Docs |
| connection_type | Required. The kind of service responding to analytics extension requests. | /api/-/settings/site/extensions/analytics/connections/{connection_luid} | Site or server administrator | Yes | Yes | View Docs |
| extensions_enabled | Specifies whether extensions are allowed to run on the site. | /api/-/settings/site/extensions/dashboard | Server or site administrator | Yes | Yes | View Docs |
| port | The specific network port used for encrypted communication. | /api/-/settings/site/extensions/analytics/connections/{connection_luid} | Site or server administrator | Yes | Yes | View Docs |
| host | The location of an external service (TabPy, Rserve, EINSTEIN_DISCOVERY, Generic API, or other) that responds to your analytics extension requests. | /api/-/settings/site/extensions/analytics/connections/{connection_luid} | Site or server administrator | Yes | Yes | View Docs |
| repository_url | The internal system URL that identifies the specific location of an "Ask Data" Lens within the Tableau repository. | /api/-/askdata/lenses/{lens_id} | Read access to the lens | Yes | Yes | View Docs |
| is_certified | Indicates if the metric is certified. | /api/-/pulse/definitions/{definition_id} | Any user (filtered by permissions) | Yes | No | View Docs |
| extensions_enabled | Specifies whether sandboxed extensions are allowed to run on the site. | /api/-/settings/server/extensions/dashboard | Server administrator | Yes | Yes | View Docs |
| tls_certificate_expiry_date | The TLS certificate expiry date in the form of: 2024-06-05T08:15:09Z. | /api/-/customdomains/settings/site/{site_luid} | Server administrator | Yes | No | View Docs |
| allow_full_data | When true, the extension has access to underlying data of a workbook. | /api/-/settings/site/extensions/dashboard | Server or site administrator | Yes | Yes | View Docs |
| allow_full_data | When true, the extension has access to underlying data of a workbook. | /api/-/settings/site/extensions/dashboard/safeListItems | Site or server administrator | Yes | Yes | View Docs |
| allow_sandboxed | Specifies whether sandboxed extensions are allowed to run on the site. | /api/-/settings/site/extensions/dashboard | Server or site administrator | Yes | Yes | View Docs |
| is_enabled | The identity pool is enabled by default. | /api/-/authn-service/identity-pools | Server administrator | Yes | Yes | View Docs |
| is_auth_enabled | Optional. Set to true if authentication is enabled on the external service. | /api/-/settings/site/extensions/analytics/connections/{connection_luid} | Site or server administrator | Yes | Yes | View Docs |
| iframed_idp_enabled | Allows the identity provider (IdP) to authenticate inside of an iFrame. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| prompt | Prompts the user for re-authentication and consent. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| url | Location of the dashboard extension to be blocked from a site. | /api/-/settings/server/extensions/dashboard/blockListItems | Server administrator | Yes | Yes | View Docs |
| voluntary_acr_values | List of voluntary Authentication Context Reference Class values used for authentication. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| custom_scope | Custom scope user-related value to query the IdP. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| is_ssl_enabled | Optional. Set to true if SSL is enabled on the external service. | /api/-/settings/site/extensions/analytics/connections/{connection_luid} | Site or server administrator | Yes | Yes | View Docs |
| enabled | Indicates whether the analytics extension is enabled for the site. | /api/-/settings/site/extensions/analytics | Server or site administrator | Yes | Yes | View Docs |
| custom_domain | The custom domain associated with the Tableau site. | /api/-/customdomains/settings/site/{site_luid} | Server administrator | Yes | No | View Docs |
| custom_domain | The custom domain associated with the Tableau site. | /api/-/customdomains/site/{site_luid} | Server administrator | Yes | No | View Docs |
| identity_store_type | Identity store type used to provision users. | /api/-/authn-service/identity-pools | Server administrator | Yes | Yes | View Docs |
| client_authentication | Token endpoint authentication method. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| config_url | Provider configuration URL. Specifies the location of the provider configuration discovery document that contains the OpenID provider metadata. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| auth_type | Type of authentication. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| auth_type | Authentication type configured with this identity pool. | /api/-/authn-service/identity-pools | Server administrator | Yes | Yes | View Docs |
| connection_type | Required. The kind of service responding to analytics extension requests. | /api/-/settings/site/extensions/analytics/workbooks/{workbook_luid}/selected_connection | Permissions to the specified workbook | Yes | Yes | View Docs |
| connection_type | Required. The kind of service responding to analytics extension requests. | /api/-/settings/site/extensions/analytics/connections | Site or server administrator | Yes | Yes | View Docs |
| connection_type | Required. The kind of service responding to analytics extension requests. | /api/-/settings/site/extensions/analytics/workbooks/{workbook_luid}/connections | Permissions to the specified workbook | Yes | Yes | View Docs |
| ignore_jwk | Set value to true if the IdP does not support JWK validation. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| ignore_domain | Ignore the domain name portion of the email claim from the IdP. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| auth_type | Authentication type configured with this identity pool. | /api/-/authn-service/identity-pools/{uuid} | Server administrator | Yes | Yes | View Docs |
| username_claim | Claim for retrieving username from the OIDC token. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| identity_store_type | Identity store type used to provision users. | /api/-/authn-service/identity-pools/{uuid} | Server administrator | Yes | Yes | View Docs |
| type | Identity store type used to provision users. | /api/-/authn-service/identity-stores | Server administrator | No | Yes | View Docs |
| enable_slo | Enable single logout (SLO). | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| essential_acr_values | List of essential Authentication Context Reference Class values used for authentication. | /api/-/authn-service/auth-configurations | Server administrator | Yes | Yes | View Docs |
| url | Location (URL) of the dashboard extension to be allowed on a site. | /api/-/settings/site/extensions/dashboard/safeListItems | Site or server administrator | Yes | Yes | View Docs |
| url | Location (URL) of the dashboard extension to be allowed on a site. | /api/-/settings/site/extensions/dashboard | Server or site administrator | Yes | Yes | View Docs |
| url | Location (URL) of the dashboard extension to be allowed on a site. | /api/-/settings/site/extensions/dashboard/safeListItems/{safe_list_item_luid} | Site or server administrator | Yes | Yes | View Docs |
| url | Location of the dashboard extension to be blocked from a site. | /api/-/settings/server/extensions/dashboard/blockListItems/{block_list_item_luid} | Server administrator | Yes | Yes | View Docs |
| prompt_needed | When true, the user will be prompted to grant an extension access to the underlying data of a workbook. This setting is only effective when the extension is on the site safe list. Default is false. | /api/-/settings/site/extensions/dashboard | Server administrator | Yes | Yes | View Docs |
| prompt_needed | When true, the user will be prompted to grant an extension access to the underlying data of a workbook. This setting is only effective when the extension is on the site safe list. Default is false. | /api/-/settings/site/extensions/dashboard/safeListItems | Server administrator | Yes | Yes | View Docs |
Supported From Version
Supported from Axonius version 4.6
Connecting the Adapter in Axonius
Required Parameters
-
Tableau domain or IP Address - The hostname or IP address of the Tableau server. For Tableau Cloud, the server address in the URI must contain the pod name, such as 10az, 10ay, or us-east-1
-
The API version (default: 3.8) - The API version to connect to.
-
Either of the following pair of credentials:
- User Name and Password - The credentials for a user account that has the permissions to fetch assets.
- Token Name and **Token Secret **- An API Key and Secret associated with a user account that has permissions to fetch assets. For information on how to obtain a token, see Tableau: Tools, REST Basics, and Sign In.
Optional Parameters
-
The URL of the site to sign in to - The URL of the site. Leave blank for Onprem Tableau instances. This value is contained in the URL for Cloud. (i.e. https://prod-useast-a.online.tableau.com/#/site/sitename/ )
-
Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
-
HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
-
HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
-
HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.
To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.
Advanced Settings
Note
Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to Advanced Configuration for Adapters.
- Fetch groups for each user - Select whether to fetch groups for each user.
- Fetch users from all sites - Select this option to fetch users from all sites.
- Fetch application settings - Select this option to fetch Application Settings.
Note
To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.
Updated 10 days ago
