If you can't find the product or version you're looking for, visit support.ataccama.com/downloads

Tableau Connection

Tableau is a visual analytics and data storytelling tool that focuses primarily on business intelligence. Setting up a connection to Tableau is a prerequisite for importing Tableau reports to ONE.

Your Tableau connection is unavailable during metadata indexing on Tableau Cloud. This occurs every three months and results in the Tableau Metadata GraphQL APIs being unaccessible for a week or longer.

Until the metadata indexing finishes, you cannot browse or import any data from Tableau.

Only Tableau version 2022.3 and later are supported in Ataccama ONE.

Configure the connection in Tableau

Start with Tableau configuration, which consists of setting up combined authentication using personal access tokens and connected apps.

To enable the report preview, workspace structure, and browsing for reports in ONE, you need to ensure the following is configured in Tableau:

A personal access token (PAT), used for browsing and importing data.
A connected app, used for allowing data preview. This can be assigned either on all projects or only a single one.

The following section serves as a checklist rather than as a tutorial so that you don’t miss any important step in the procedure.

If you are using Tableau Server, additional steps are required before proceeding. See Tableau Server.

Equally, if you configure Tableau Server later, after following the procedure in Tableau Server you need to repeat these steps.

In Tableau, create a personal access token (PAT) for a user with minimum Explorer site role.
1. To create a token, find your user profile on the Users tab.
2. Switch to the Settings tab.
3. In Personal Access Tokens, provide a new name for the token and select Create new token.
  
  For more details, see the official Tableau documentation, articles Personal Access Tokens and Set Users' Site Roles respectively.
In Tableau, configure a connected app with direct trust. This is typically a task for the Tableau site administrator.

Follow the instructions provided in the official Tableau documentation, article Configure Connected Apps with Direct Trust.

Tableau Server

Enable the Metadata services for GraphQL. To do this, open the terminal on the Tableau Server machine and run the following:
```
tsm maintenance metadata-services enable
```
Enable the Tableau Personal Access Token (PAT). To do this, open the terminal on the Tableau Server machine and run the following:
```
tsm authentication pat-impersonation enable
```
Apply all changes. To do this, open the command prompt on the Tableau Server machine and run the following:
```
tsm pending-changes apply
```

Return to Configure the connection in Tableau. Note that any PATs generated prior to following these steps have to be generated again.

Create a source

To connect to Tableau:

Navigate to Data Catalog > Sources.
Select Create.
Provide the following:
- Name: The source name.
- Description: A description of the source.
- Deployment (Optional): Choose the deployment type.
  
  You can add new values if needed. See Lists of Values.
- Stewardship: The source owner and roles. For more information, see Stewardship.

Alternatively, add a connection to an existing data source. See Connect to a Source.

Add a connection

Select Add Connection.
In Select connection type, choose Reporting tools > Tableau.
In Deployment Type, select Tableau Cloud or Tableau Server.
Provide the following:
- Name: A meaningful name for your connection. This is used to indicate the location of catalog items.
- Description (Optional): A short description of the connection.
- Dpe label (Optional): Assign the processing of a data source to a particular data processing engine (DPE) by entering the DPE label assigned to the engine. For more information, see DPM and DPE Configuration in DPM Admin Console.
- Server URI: The URL of your Tableau instance. For example: <domain>.online.tableau.com.
  
  A task is automatically created for adding the URL to Content Security Policy directives in ONE. See step Configure the Content Security Policy.
- Site Content URL: The project URI. In the full URL, this element is located between the /site/` element and the resource name.
  
  For example, if the site content URL is ataccama, the full URL to your workbooks would look like this: <domain>.online.tableau.com/#/site/ataccama/workbooks.
- Select Tableau version: Choose the Tableau version you’re working with.
  
  It is not necessary to select the version if you are using Tableau Server, it is 3.latest.js by default.
In Additional settings, select Enable exporting and loading of data if you want to export data from this connection and use it in ONE Data or outside of ONE.

Consider the security and privacy risks of allowing the export of data to other locations.

Add credentials

Provide the information from Tableau about your personal access token and the connected app. Before continuing, make sure you are logged into your Tableau account on a separate tab.

If you don’t have the necessary permissions, request this information from your Tableau administrator in advance.

Select Add Credentials.

Provide the following:

Name (Optional): A name for this set of credentials.
Description (Optional): A description for this set of credentials.
Connected App Secret ID: The identifier of the connected app secret.

You can find these on the Settings tab in Tableau: switch to Connected apps and open the app you configured for ONE.
Personal Access Token Name: The name of the personal token name defined for the given username.
Select a secret management service (optional): If you want to use a secret management service to provide values for the following fields, specify which secret management service should be used. After you select the service, you can enable the Use secret management service toggle and provide instead the names the values are stored under in your key vault. For more information, see Secret Management Service.
Connected App Secret Value: The secret for your connected app. Alternatively, enable Use secret management service and provide the name this value is stored under in your selected secret management service.
Connected App Client ID: The client identifier of the connected app. Alternatively, enable Use secret management service and provide the name this value is stored under in your selected secret management service.
Username: The name of the user whose personal access token is used to establish the connection. Alternatively, enable Use secret management service and provide the name this value is stored under in your selected secret management service.

Personal Access Token Secret: The corresponding personal access token secret. Alternatively, enable Use secret management service and provide the name this value is stored under in your selected secret management service.

Personal access tokens expire if they are not used for 15 days. In that case, you need to create a new one and provide it to ONE again.

Otherwise, tokens remain valid for a year, after which they are automatically refreshed and must be set up again in ONE.

If you want to use these credentials by default when connecting to this data source, select Set as default.

To view report preview, the credentials used to access data must be configured as default as otherwise previews are not shown.

You can create an admin account for this purpose, which has access granted to all projects in Tableau and limited access to the data source in ONE. Alternatively, you can create multiple connections, one for each user with a default set of credentials for that user.

Test the connection

To test and verify whether the data source connection has been correctly configured, select Test Connection.

If the connection is successful, continue with the following step. Otherwise, verify that your configuration is correct and that the data source is running.

Save and publish

Once you have configured your connection, save and publish your changes. If you provided all the required information, the connection is now available for other users in the application.

In case your configuration is missing some required fields, you can view a list of detected errors instead. Review your configuration and resolve the issues before continuing.

Finish setting up the connection

Configure the Content Security Policy

To see the reports preview of your Tableau reports in ONE, admins need to configure the content security policy. For Tableau, the following directives must be defined:

frame-src: Set this to the URL of your Tableau instance, for example: https://<domain>.online.tableau.com.
connect-src: Set this to the URL of your Tableau instance, for example: https://<domain>.online.tableau.com. For more information, see Content Security Policy Configuration.

Manage access rights

Make sure you have the corresponding Full, Edit, or View data access rights in ONE:

On sources to import reports from your BI tool.
On reports to manage their preview.

For more information, see Share Access to Assets.

Next steps

You can now import your Tableau reports to ONE.

In Data Catalog > Sources, find and open the source you just configured. Switch to the Connections tab and select Import Alternatively, opt for Discover or Discover documentation flow.

Or, to import only some assets, select Browse on the Connections tab. Choose the assets you want to analyze and then the appropriate importing or profiling option.

To learn more about reports in ONE, see Reports and Reports from Tableau.

While Tableau has three report types (sheet, dashboard, and story), the Tableau API doesn’t differentiate between a dashboard and a story. For this reason, both dashboards and stories are labeled as dashboards in ONE.

Was this page useful?