Enable the Tableau Metadata API
To enable the Tableau Metadata API, follow the steps in Tableau documentation.
Publish the worksheets you want to crawl
Ensure you publish the worksheets in Tableau that you want to crawl in Atlan.
To publish Tableau worksheets, follow the steps in Tableau documentation.
Choose authentication mechanism
Atlan supports the following authentication methods for fetching metadata from Tableau:
- Basic — this method uses a username and password.
- Personal access token — this method uses a personal access token.
- JWT bearer — this method uses a username and JWT client ID, secret ID, and secret value.
Basic authentication
Add a user
Ensure you add a user with the role Site Administrator Explorer to the site you want to crawl.
To add such a user, follow the steps in Tableau documentation.
Grant user permissions
Ensure you grant the View capability for all the assets you want to crawl.
To grant the permission, follow the steps in Tableau documentation.
Personal access token authentication
If you want to access Tableau using an access token, you can generate a personal access token.
To generate a personal access token, follow the steps in Tableau documentation.
JWT bearer authentication
Configure a connected app
If you want to access Tableau using a JSON web token (JWT), you can configure a Tableau connected app. There are two types of connected apps that you can configure — direct trust or OAuth 2.0 trust.
To authenticate the Tableau connection in Atlan using this method, you will need the following:
- Username — your Tableau Server username or Tableau Online email address, the user must have a Site Administrator Explorer role
-
Connected app ID — client ID generated for the connected app
-
Secret ID — secret ID linked to the client ID of the connected app
-
Secret value — secret value used to sign the token
To configure a connected app, follow the steps in Tableau documentation:
Access scopes for connected apps
For JWT authorization, scopes define access permissions granted to the token holder. Scopes control the specific actions that an application or user can perform in Tableau while accessing content through a connected app.
The Tableau connector in Atlan uses two read scopes to extract metadata from Tableau. Note that the Tableau connector is preconfigured to use these scopes, no action required.
Atlan uses the following scopes for JWT authentication:
-
tableau:content:read— allows read access to your assets in Tableau, including:-
Workbooks — can list, access, and retrieve metadata for workbooks.
-
Views — can fetch specific views or dashboards within workbooks.
-
Data sources — can access published data sources and associated metadata.
-
Projects — can retrieve project metadata.
-
Metrics — can read metrics associated with workbooks or dashboards.
-
Tables and databases — can access metadata for tables and databases connected to Tableau.
-
-
tableau:users:read— allows read access to user details. This enables Atlan to display the source owner property for supported Tableau assets, including in the impact analysis report.