Using Tableau projects to manage data model security
Tableau Server and Cloud are intended to have content organized into projects. Projects act much like file folders on a network or cloud drive. When it comes to security and accessing content with projects, we can leave them unlocked and delegate access control to the individuals who create the content within the project. Alternatively, we can lock permissions to content within the project at the project level.
Locking permissions to the project level is the best practice for several reasons:
- It is easier to manage security as the number of projects will typically be much less than the number of workbooks, data sources, lenses, flows, and other objects that reside in projects.
- Projects often map very well to internal teams with shared data needs. These teams often map to groups in Tableau. Securing projects to groups, as opposed to individuals, makes the job of managing access control easier.
- Delegation can occur...