Tableau Online

Tableau Online is a self-service analytics application that enables users to explore data and answer questions.

The following sections explain prerequisites, resources, and instructions for integrating with SaaS Management.

Stored Information for Tableau Online

info

Integrating Flexera One’s SaaS Management with Tableau Online now requires using a personal access token (PAT). To implement the Tableau personal access token authentication, there is a limit of one personal access token per concurrent request. For more information, see the note within the Tableau Cloud Help topic, Understand Personal Access Tokens. Due to this limitation, the SaaS Management integration with Tableau Online requires the following integration task schedule:

• License Information integration task will run at 5 AM UTC.

• Application Roster integration task will run at 6 AM UTC.

• Application Access integration task will run at 11 AM UTC.

Existing SaaS Management integrations with Tableau Online will fail because the authentication method has been updated from OAuth to personal access token authentication. To resolve this issue, you need to reauthorize the integration by generating a new personal access token as described in Integrating Tableau Online With SaaS Management. See also the following Best Practice for implementation details.

For new SaaS Management integrations with Tableau Online, the integration tasks are not run instantly. After the integration is authorized, the integration tasks will run per the above schedule.

tip

Flexera recommends adding only one managed application per Tableau account to SaaS Management. If more than one managed Tableau Online application is added to SaaS Management with the same credentials at a given time, only one Tableau Online managed application task will run. The remaining tasks will fail. There may be a delay in syncing your Tableau account data with SaaS Management due to the Tableau Online integration task schedule and the time when the managed Tableau Online application is added to SaaS Management. For example, if the Application Access integration task runs before the Application Roster task, you will see activity in the Tableau Online Suspicious Activities tab. You will have to wait until the next Application Roster job runs to sync the data between Tableau Online and SaaS Management.

The following table describes the available integration tasks and stored data within SaaS Management.

Available Integration Tasks	Information Stored
Application Roster	User ID Email First Name Last Name License Name
Application Access	User ID Last Login
License Differentiation	See Tableau License Types and Tracking Application Activity by License Type for License Differentiation.
License Information	Unique ID Provisioned (License count) The above license information is retrieved every 24 hours. Therefore, the data in your Tableau Subscriptions may not match the data in SaaS Management for license information.
Reclamation	See Reclaiming SaaS Licenses.

note

The information stored is subject to change as enhancements are made to the SaaS application.

Required Minimum Permissions for Tableau Online

SiteAdministratorExplorer access is required.

Authentication Method for Tableau Online

Tableau Personal Access Token is the required authentication method.

Required Credentials for Tableau Online

The following credentials are required:

• API Base URL

• Personal Access Token Name

• Personal Access Token Secret

• Content URL— This is not the site name. Rather, the Content URL is the value that in the server environment is referred to as the Site ID.

Tableau License Types

Tableau offers the following license types that are described in the following table.

License Type	Description
Creator	This license type’s user permissions include: Server administration Advanced server deployment monitoring Programmatic content migration Adding data sources to create new dashboards and visualizations.
Explorer	This license type’s user permissions include: Site role management, content ownership, settings, and permission settings Visualizing existing data and exploring existing data sources, but not enabling the ability to add any new data or data sources Creating alerts and sending emails when the stated conditions are met Scheduling data flow Creating and sharing custom views.
Viewer	This license type’s user permissions include: Viewing and interacting with the published dashboards Receiving data-driven alerts and creating personal alerts.

Integrating Tableau Online With SaaS Management

info

Flexera One’s SaaS Management updated the Tableau Online authentication method from OAuth to personal access token (PAT) authentication. If you do not update the authentication method for your existing Tableau Online managed application, the managed application will fail. You need to reauthorize the managed application to run it again, which requires generating a new Personal Access Token Name and Personal Access Token Secret as described in the following steps. Reauthorizing the integration also enables the integration task schedule listed in Stored Information for Tableau Online.

Complete the following steps to integrate Tableau Online with SaaS Management.

1. Sign in to your Tableau Online account using your SiteAdministratorExplorer username and password.

2. To generate a new personal access token name and secret:

   1. At the top of the Tableau Home page, click your profile image or initials. Then, select My Account Settings. The Account Settings page opens.
   2. Go to the Personal Access Tokens section. In the Token Name field, enter a descriptive name for your token. Copy and paste this value to a file. You will later copy and paste this token name into SaaS Management as the Personal Access Token Name value in step 6.
   3. Click Create new token. The Personal Access Token window opens.
   4. Click Copy to Clipboard and paste this value to a file. You will later copy and paste this information into SaaS Management as the Personal Access Token Secret value in step 6.
   5. Close the Personal Access Token window.

3. To get the Content URL, note the Console URL.

   For example, if the Console URL is https://prod-useast-a.online.tableau.com/#/site/flexera/home

   Content URL is flexera.

4. To get the API Base URL, note the Console URL.

   For example, if the Console URL is https://prod-useast-a.online.tableau.com/#/site/flexera/home

   API Base URL is prod-useast-a.online.tableau.com.

5. In SaaS Management, add the Tableau application. For more information, see Adding an Application.

6. Copy and paste the following Tableau Online information in SaaS Management:

   • API Base URL

   • Content URL

   • Personal Access Token Name

   • Personal Access Token Secret

7. Click Authorize.

   For further information on managing and optimizing your organization’s Tableau licenses, see:

   • Auto-Populated Tableau License Information

   • Managing Available Tableau Licenses

   • Tracking Application Activity by License Type for License Differentiation

   • Reclaiming SaaS Licenses.

Auto-Populated Tableau License Information

The SaaS Management integration with Tableau offers a License Information integration task that automatically retrieves every 24 hours the name of the Tableau subscription, license type, and total allowed number of licenses. This auto-populated Tableau license information provides a more complete view of your Tableau SaaS entitlements and component usage by displaying:

• Assigned entitlements

• User’s license activity (based on the user’s last login).

info

If you enable the License Information integration task, you need to enter and keep up to date the following Licenses Tab information. The License Information integration task does not pull in this information. The SaaS application’s annual spend calculation relies on entered and accurate license effective and expiration dates.

• Effective Date

• Expiration Date

• Cost

• Currency

• Payment Frequency

To auto-populate Tableau license information, see Auto-Populating SaaS Application License Information. When the License Information integration task is enabled, the License type, Name, and Provisioned fields in the Tableau Licenses tab are disabled as this information is automatically populated. The active and inactive ingested license data from Tableau can be compared against your Tableau Subscriptions.

Managing Available Tableau Licenses

After the License Information integration task for Auto-Populated Tableau License Information is enabled, you can add or remove the Tableau product licenses you wish to manage within SaaS Management. To manage available Tableau licenses, see Managing Available SaaS Application Licenses.

API Endpoints for Tableau Online

Application Roster and Application Access

https://<base_url>/api/3.14/sites/<siteId>/users

License Information

https://<base_url>/api/3.14/sites/<siteId>

Reclamation

https://<base_url>/api/3.14/sites/<siteId>/users/userId