Self-Service Security in Tableau Server via Outlook Groups


Self-Service Security in Tableau Server via Outlook Groups

by Ben Sullins

Managing Tableau Server security can be a lot of work, especially when you’re dealing with tons of users from all over the enterprise. Fortunately, Tableau has an easy way to set this up once and let users manage it themselves using Active Directory Groups (aka Outlook Groups).


  • Tableau Server with Active Directory integration
  • Exchange Server with Outlook Web Access (OWA)

Process when complete

  1. Users browse to OWA and join groups
  2. Owners of the outlook groups, usually department heads, approve access to the groups
  3. Tableau has an automated sync job (attached) that imports the users to Tableau Server

Outlook Group Setup

  1. Browse to your OWA site, typically
  2. Click on ‘options’
  3. Click ‘All Options’
  4. Click on ‘New’ under ‘Public Groups I Own’
  5. Outlook Web Access Create New Group for Tableau Server

  6. This is a good time to start a best practice in your group naming convention. I recommend something starting with ‘Tableau – ‘ and then maybe the department or group name.
  7. Ideally you have a group for every project which also loosely matches your org structure
  8. It’s important to set the correct membership approval option for the group. If the group will have access to sensitive information then make it either owner approval or closed. Then you can assign the business owner of the group who will manage membership (aka self-service)
  9. Outlook Web Access New Group Dialogue for Tableau Server

  10. *I also recommend creating a ‘Tableau – Users’ and ‘Tableau – Publishers’ groups which are totally self-service w/o any approval required

Add the Outlook Groups to Tableau Server

  1. Browse to the import groups page in your Tableau Server environment (http://your-tableau-url/import/groups)
  2. Search for the groups (it may take ~10min after creating the groups for Tableau Server to find them)
  3. Import Active Directory Group into Tableau Server for Self-Service security configuration

  4. Select the groups, then click ‘Import’. If you get 0 records found it may be because of an AD setting (more here)
  5. Go into the projects in your environment and add these new groups to them with the appropriate level of security
  6. With all of the groups imported and groups setup, it’s time to automate the process

Automate the Outlook Group sync to Tableau Server

  1. Login to your Tableau Server (usually using Remote Desktop)
  2. Create a new folder c:tasks
  3. Save the following script into this directory and rename it, removing the .txt file extension Tableau_SyncADGroups_2.0.bat
  4. Edit the script, replacing and adding the ‘tabcmd syncgroup’ command for every group you wish to import automatically.
  5. Now is a good time for a test run. Right click on the .bat file and choose ‘Run’. If all goes well, check the server in the background tasks view (http://your-tableau-url/admin/views/tabbed_admin_views/BackgroundTasks) to make sure it actually performed the sync.
  6. Lastly, we need to schedule this to run on a regular basis. I recommend nightly as to not conflict with active sessions of users. For detailed steps on creating a windows task go here:
  7. In the step for choosing an Action select ‘Start a Program’ and browse to our script. It should look like this
  8. Create a Windows Scheduled Task to Automate the Synchronization of Active Directory Groups into Tableau Server

There will be some maintenance of this script to add the new groups you import to Tableau but it should only be a fraction of what the maintenance is of adding users manually to Tableau Server. As always if you have any questions about this or want to have a chat about the approach feel free to reach out to us. Thanks!

More About the Author

Ben Sullins

Business Intelligence Consultant
Adding Google Analytics to Your Tableau Server If you’re a Tableau Server administrator or publisher of content to Tableau Server, then you probably at some point wondered how ...
Migrating Tableau Server to a New Domain In general, Tableau Server is relatively easy to administer. This is in large part due to having very few configuration items you can ...

See more from this author →

InterWorks uses cookies to allow us to better understand how the site is used. By continuing to use this site, you consent to this policy. Review Policy OK


Interworks GmbH
Ratinger Straße 9
40213 Düsseldorf
Geschäftsführer: Mel Stephenson

Telefon: +49 (0)211 5408 5301

Amtsgericht Düsseldorf HRB 79752
UstldNr: DE 313 353 072


Love our blog? You should see our emails. Sign up for our newsletter!