Site roles and active directory import and synchronization

Site roles and active directory import and synchronization

Site roles and active directory import and synchronization

EXPLANATION
When you import Active Directory users to a site, you can specify the site role. If a user is not yet a member of any site on the server, the user is added to the site with the assigned role. When you synchronize Active Directory groups, the site role is applied through the Minimum Site Role setting on the Groups – Details page.

Site roles and active directory import and synchronization

If a user already exists in a Tableau Server site, the site role assigned during the import or sync process will be applied if it gives the user more access in a site. Importing or synchronizing users and groups will promote a user’s site role, but not demote a user’s site role.

If a user already has the ability to publish, that ability is maintained. For example, if a user with the current site role of Unlicensed (can publish) is imported with the new site role of Interactor, that user’s site role will be promoted to Publisher on import.

Site roles and active directory import and synchronization

To guarantee a user maintains a site role with equal or greater capabilities in server after an import, the following matrix shows the rules applied for site roles on import. Bold indicates that a site role was promoted to preserve the user’s ability to publish.

Note: The Import Site Role row abbreviated headers indicate the site role specified for import. The Current Site Role column headers represent the current user site role. The table values represent the abbreviated resulting site role. A bold site role in the table indicates a site role promotion that preserves the ability to publish.

Site Administrator: SA
Publisher: P
Interactor: I
Viewer (can publish): V-P
Unlicensed (can publish): U-P
Unlicensed: U

Current Site Role
Import Site Role
SA

P

I

V

V-P

U

U-P

Site Administrator

(SA)

SA SA SA SA SA SA SA
Publisher

(P)

SA P P P P P P
Interactor

(I)

SA P I I P I P
Viewer (can publish)

(V-P)

SA P P V-P V-P V-P V-P
Viewer

(V)

SA P I V V-P V V-P
Unlicensed (can publish)

(U-P)

SA P P V-P V-P U-P U-P
Unlicensed

(U)

SA P I V V-P U U-P

Leave a Reply

Your email address will not be published. Required fields are marked *