Skip to main content
Connect Tableau Cloud to Oleria to see who can reach your projects, workbooks, and data sources, whether through direct grants, group membership, or inherited project permissions. A single Oleria connection covers one Tableau Cloud site - Oleria discovers every user, group, site role, and content resource the connection can reach.

​
What Oleria discovers

​
Prerequisites

  • A Tableau Cloud site and an account with the Site Administrator Creator or Site Administrator Explorer site role.
  • One of the following credentials for the connecting account:
    • A Personal Access Token (recommended) generated from the account’s Tableau profile.
    • A username and password for a Tableau account with site administrator access.
    • A Connected App (Direct Trust JWT) registered on the site, with a secret.
    • A Unified Access Token (UAT) issued by your identity provider, configured at the Tableau Cloud Manager level.
  • Your site’s Server URL (the Tableau Cloud pod, for example https://10ax.online.tableau.com) and Site Content URL (the short identifier in your site’s URL; leave blank for the pod’s default site).
Oleria recommends using a dedicated service account rather than a named employee account, so the connection doesn’t break on personnel changes. The account must have Site Administrator Explorer or Site Administrator Creator access to reach all users, groups, and content permissions.

​
Create credentials in Tableau Cloud

Tableau Cloud supports four authentication methods. All four exchange credentials for a session token at sign-in, so Oleria reads the same data whichever method you use. Personal Access Token is recommended - it doesn’t require a live user session and has a long, configurable lifetime.
1

Sign in as the service account

Sign in to Tableau Cloud as the dedicated service account.
2

Open account settings

Select the account menu in the top right corner, then go to Account Settings.
3

Create the token

Under Personal Access Tokens, select Create new token, give it a name (for example Oleria), and copy the Token Name and Token Secret.
The token secret is shown only once. Save it immediately and securely.

​
Connect Tableau Cloud to Oleria

1

Open the integration

Go to your Oleria workspace, select Integrations -> select Tableau Cloud.
2

Complete the connection form

Fill in the fields that apply to your chosen method:Always requiredPersonal Access TokenUsername and PasswordConnected App (Direct Trust JWT)Unified Access Token
3

Save the integration

Select Authenticate to validate and save the integration.

​
Verify the integration

Confirm Tableau Cloud appears on the Connected tab of your Oleria Integrations page. After the first sync completes, you can review the discovered users, groups, site roles, resources, and access grants in your Oleria workspace. If Admin Insights is enabled on the site, activity appears alongside them.

​
Remediation actions

​
Known limitations

  • No separate disable state. Tableau Cloud has no suspend/disable concept - Unlicensed is both the deprovisioning and the role-removal destination. Setting a user to Unlicensed effectively disables their access.
  • Activity requires Admin Insights. If Admin Insights isn’t enabled on the site or the connecting account can’t access it, Oleria collects no activity and shows no error. All other data syncs normally.
  • Only content changes are collected as activity. Oleria collects Workbook and DataSource create, update, and delete events. View, download, and sign-in events aren’t collected.
  • Personal access tokens aren’t discovered as NHIs. Oleria discovers Connected Apps and their secrets as non-human identities, but not the personal access tokens users create.

​
Contact us

For questions about this integration, contact us at support@oleria.com.