Tableau

Tableau is a data visualization and analysis tool used to create charts, graphs, maps, dashboards, and stories.

Asset Types Fetched

  • Users, Application Settings

Before You Begin

Authentication Methods

  • User Name and Password, OR
  • API Token and Secret

APIs

Axonius uses the following APIs:

Required Permissions

To fetch Users, you must be a server administrator or site administrator.

To fetch Application Settings:

  • The Fetch application settings advanced setting must be enabled.
  • Required permissions and API endpoints per setting:
Setting NameSetting DescriptionEndpointRequired PermissionTableau CloudTableau ServerDocumentation Link
enabledIndicates whether the analytics extension service is enabled./api/-/settings/server/extensions/analyticsServer administratorNoYesView Docs
connection_typeRequired. The kind of service responding to analytics extension requests./api/-/settings/site/extensions/analytics/connections/{connection_luid}Site or server administratorYesYesView Docs
extensions_enabledSpecifies whether extensions are allowed to run on the site./api/-/settings/site/extensions/dashboardServer or site administratorYesYesView Docs
portThe specific network port used for encrypted communication./api/-/settings/site/extensions/analytics/connections/{connection_luid}Site or server administratorYesYesView Docs
hostThe location of an external service (TabPy, Rserve, EINSTEIN_DISCOVERY, Generic API, or other) that responds to your analytics extension requests./api/-/settings/site/extensions/analytics/connections/{connection_luid}Site or server administratorYesYesView Docs
repository_urlThe internal system URL that identifies the specific location of an "Ask Data" Lens within the Tableau repository./api/-/askdata/lenses/{lens_id}Read access to the lensYesYesView Docs
is_certifiedIndicates if the metric is certified./api/-/pulse/definitions/{definition_id}Any user (filtered by permissions)YesNoView Docs
extensions_enabledSpecifies whether sandboxed extensions are allowed to run on the site./api/-/settings/server/extensions/dashboardServer administratorYesYesView Docs
tls_certificate_expiry_dateThe TLS certificate expiry date in the form of: 2024-06-05T08:15:09Z./api/-/customdomains/settings/site/{site_luid}Server administratorYesNoView Docs
allow_full_dataWhen true, the extension has access to underlying data of a workbook./api/-/settings/site/extensions/dashboardServer or site administratorYesYesView Docs
allow_full_dataWhen true, the extension has access to underlying data of a workbook./api/-/settings/site/extensions/dashboard/safeListItemsSite or server administratorYesYesView Docs
allow_sandboxedSpecifies whether sandboxed extensions are allowed to run on the site./api/-/settings/site/extensions/dashboardServer or site administratorYesYesView Docs
is_enabledThe identity pool is enabled by default./api/-/authn-service/identity-poolsServer administratorYesYesView Docs
is_auth_enabledOptional. Set to true if authentication is enabled on the external service./api/-/settings/site/extensions/analytics/connections/{connection_luid}Site or server administratorYesYesView Docs
iframed_idp_enabledAllows the identity provider (IdP) to authenticate inside of an iFrame./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
promptPrompts the user for re-authentication and consent./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
urlLocation of the dashboard extension to be blocked from a site./api/-/settings/server/extensions/dashboard/blockListItemsServer administratorYesYesView Docs
voluntary_acr_valuesList of voluntary Authentication Context Reference Class values used for authentication./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
custom_scopeCustom scope user-related value to query the IdP./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
is_ssl_enabledOptional. Set to true if SSL is enabled on the external service./api/-/settings/site/extensions/analytics/connections/{connection_luid}Site or server administratorYesYesView Docs
enabledIndicates whether the analytics extension is enabled for the site./api/-/settings/site/extensions/analyticsServer or site administratorYesYesView Docs
custom_domainThe custom domain associated with the Tableau site./api/-/customdomains/settings/site/{site_luid}Server administratorYesNoView Docs
custom_domainThe custom domain associated with the Tableau site./api/-/customdomains/site/{site_luid}Server administratorYesNoView Docs
identity_store_typeIdentity store type used to provision users./api/-/authn-service/identity-poolsServer administratorYesYesView Docs
client_authenticationToken endpoint authentication method./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
config_urlProvider configuration URL. Specifies the location of the provider configuration discovery document that contains the OpenID provider metadata./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
auth_typeType of authentication./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
auth_typeAuthentication type configured with this identity pool./api/-/authn-service/identity-poolsServer administratorYesYesView Docs
connection_typeRequired. The kind of service responding to analytics extension requests./api/-/settings/site/extensions/analytics/workbooks/{workbook_luid}/selected_connectionPermissions to the specified workbookYesYesView Docs
connection_typeRequired. The kind of service responding to analytics extension requests./api/-/settings/site/extensions/analytics/connectionsSite or server administratorYesYesView Docs
connection_typeRequired. The kind of service responding to analytics extension requests./api/-/settings/site/extensions/analytics/workbooks/{workbook_luid}/connectionsPermissions to the specified workbookYesYesView Docs
ignore_jwkSet value to true if the IdP does not support JWK validation./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
ignore_domainIgnore the domain name portion of the email claim from the IdP./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
auth_typeAuthentication type configured with this identity pool./api/-/authn-service/identity-pools/{uuid}Server administratorYesYesView Docs
username_claimClaim for retrieving username from the OIDC token./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
identity_store_typeIdentity store type used to provision users./api/-/authn-service/identity-pools/{uuid}Server administratorYesYesView Docs
typeIdentity store type used to provision users./api/-/authn-service/identity-storesServer administratorNoYesView Docs
enable_sloEnable single logout (SLO)./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
essential_acr_valuesList of essential Authentication Context Reference Class values used for authentication./api/-/authn-service/auth-configurationsServer administratorYesYesView Docs
urlLocation (URL) of the dashboard extension to be allowed on a site./api/-/settings/site/extensions/dashboard/safeListItemsSite or server administratorYesYesView Docs
urlLocation (URL) of the dashboard extension to be allowed on a site./api/-/settings/site/extensions/dashboardServer or site administratorYesYesView Docs
urlLocation (URL) of the dashboard extension to be allowed on a site./api/-/settings/site/extensions/dashboard/safeListItems/{safe_list_item_luid}Site or server administratorYesYesView Docs
urlLocation of the dashboard extension to be blocked from a site./api/-/settings/server/extensions/dashboard/blockListItems/{block_list_item_luid}Server administratorYesYesView Docs
prompt_neededWhen true, the user will be prompted to grant an extension access to the underlying data of a workbook. This setting is only effective when the extension is on the site safe list. Default is false./api/-/settings/site/extensions/dashboardServer administratorYesYesView Docs
prompt_neededWhen true, the user will be prompted to grant an extension access to the underlying data of a workbook. This setting is only effective when the extension is on the site safe list. Default is false./api/-/settings/site/extensions/dashboard/safeListItemsServer administratorYesYesView Docs

Supported From Version

Supported from Axonius version 4.6

Connecting the Adapter in Axonius

Required Parameters

  1. Tableau domain or IP Address - The hostname or IP address of the Tableau server. For Tableau Cloud, the server address in the URI must contain the pod name, such as 10az, 10ay, or us-east-1

  2. The API version (default: 3.8) - The API version to connect to.

  3. Either of the following pair of credentials:

    • User Name and Password - The credentials for a user account that has the permissions to fetch assets.
    • Token Name and **Token Secret **- An API Key and Secret associated with a user account that has permissions to fetch assets. For information on how to obtain a token, see Tableau: Tools, REST Basics, and Sign In.

Optional Parameters

  1. The URL of the site to sign in to - The URL of the site. Leave blank for Onprem Tableau instances. This value is contained in the URL for Cloud. (i.e. https://prod-useast-a.online.tableau.com/#/site/sitename/ )

  2. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

  3. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

  4. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

  5. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

📘

Note

Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to ​Advanced Configuration for Adapters.

  1. Fetch groups for each user - Select whether to fetch groups for each user.
  2. Fetch users from all sites - Select this option to fetch users from all sites.
  3. Fetch application settings - Select this option to fetch Application Settings.
📘

Note

To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.