TS Events functions as a primary audit data source. It contains data about the various events happening on your site, including sign-ins, publishes and accessed views.
Example: What are the most popular views?
Connect to the TS Events data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Item Name to the Rows shelf and Number of Events to the Columns shelf.
From the Data pane, drag Item Type to the Filters shelf, and tick the View box.
Do more with this data source: Using Tableau Prep, you can join Admin Insights data sources on the following fields to get more visibility into your site. If you're analysing data from multiple Tableau Cloud sites, you must also join on "Site LUID = Site LUID".
For more information, see Aggregate, Join or Union Data(Link opens in a new window) in Tableau Prep Help.
TS Users contains data about your users, such as remaining licences, site roles and workbooks owned by a user. This data source also includes information related to product activation and usage data for Tableau Desktop, Tableau Prep, web authoring and site role-specific capabilities.
Starting in February 2024, TS Users includes Tableau Pulse information for your site. A new “Pulse Metrics” field has been added to the User Content folder for tracking the number of metrics owned by a user.
Example: How many licences are being used?
Connect to the TS Users data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Measure Names to the Rows shelf and Measure Values to the Columns shelf.
Right-click the Measure Names field in the Rows shelf and select Show Filter.
Click the Measure Names filter drop-down menu, and select Customise > Show Apply Button.
In the filter, tick the Total Allowed Licences and Total Occupied Licences boxes, and then click Apply.
Do more with this data source: Using Tableau Prep, you can join Admin Insights data sources on the following fields to get more visibility into your site. If you're analysing data from multiple Tableau Cloud sites, you must also join on "Site LUID = Site LUID".
Join TS Users to Groups on “User LUID = User LUID”
Join TS Users to TS Events on “User ID = Actor User ID”
Join TS Users to Site Content on “User Email = Owner Email” or “User Email = Item Parent Project Owner Email”
For more information, see Aggregate, Join or Union Data(Link opens in a new window) in Tableau Prep Help.
Groups identifies the group membership of users. There’s one row of data for each unique combination of group and user pairing. Groups without members, and users not in a group, will be included as a row of data with null values represented as "NULL".
Example: Which users are in a given group?
Connect to the Groups data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Group Name to the Rows shelf.
(Optional) In the view, select the groups you want to explore, and then select Keep Only.
From the Data pane, drag User Email to the Rows shelf, placing it to the right of the Group Name field.
Do more with this data source: Using Tableau Prep, you can join Admin Insights data sources on the following fields to get more visibility into your site. If you're analysing data from multiple Tableau Cloud sites, you must also join on "Site LUID = Site LUID".
For more information, see Aggregate, Join or Union Data(Link opens in a new window) in Tableau Prep Help.
Site Content provides essential governance information about the projects, data sources, flows, workbooks and views on a site. The data provided about a content item may be unique to its item type. Item types with unique fields are in folders with titles that correspond to their Item Type.
As of February 2024, the Site Content data source includes Tableau Pulse information for your site. You can find the fields dedicated to Tableau Pulse within the "Metric" folder while creating views.
Note: Users that connect to the Site Content data source see data about all content items on the site, regardless of the permissions set for each item. Keep this in mind if you plan to distribute to non-administrative users.
Example: What percentage of the site's published data sources are certified?
Connect to the Site Content data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Migrated Data (Count) to the Columns shelf.
From the Data pane, drag Data Source Content Type to the Filters shelf, untick the All box and tick the Published box.
From the Data pane, drag Data Source Certified to Colour on the Marks card.
Right-click the CNT (Migrated Data) field in the Columns shelf and select Quick Table Calculation > Percent of Total.
Do more with this data source: Using Tableau Prep, you can join Admin Insights data sources on the following fields to get more visibility into your site. If you're analysing data from multiple Tableau Cloud sites, you must also join on "Site LUID = Site LUID".
For more information, see Aggregate, Join or Union Data(Link opens in a new window) in Tableau Prep Help.
Viz Load Times contains the load time information for views on your site to help content authors better understand the user experience when loading views.
Example: Which views take the longest to load?
Connect to the Viz Load Times data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Item Name to the Rows shelf and Duration to the Columns shelf.
From the Data pane, drag Status Code Type to the Filters shelf and tick the Success box.
In the Columns shelf, right-click Dimensions and select Measure (Count) > Median.
Do more with this data source: Using Tableau Prep, you can join Admin Insights data sources on the following fields to get more visibility into your site. If you're analysing data from multiple Tableau Cloud sites, you must also join on "Site LUID = Site LUID".
For more information, see Aggregate, Join or Union Data(Link opens in a new window) in Tableau Prep Help.
Job Performance contains events and runtime information for background jobs on the site, such as extract refreshes and flow runs. Starting May 2023, Job Performance includes Tableau Bridge refresh data, including the Bridge client name, pooling data and refresh started and completed times.
Example: How many extract refreshes and flow runs occur on the site?
Connect to the Job Performance data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Item Name, Item Type, Owner Email, and Job Type to the Rows shelf.
In the Rows shelf, right-click Item Name and select Sort.
In the Sort dialog, select Sort By > Field and Field Name > Job ID. Close the dialog.
From the Data pane, drag Started At (local) to the Columns shelf.
In the Columns shelf, right-click Started At (local) and select Exact Date. This converts the dimension to a measure.
From the Data pane, drag Job Result to Colour and Job Execution Duration (Days) to Size on the Marks card.
Example: What is the average job queued duration?
Connect to the Job Performance data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Started At to the Columns shelf and Started At (local) to the Rows shelf.
In the Columns shelf, right-click the Started At field and select Day from the second set of values (i.e. 11 May 2022). This converts the field to a measure.
In the Rows shelf, right-click Started At (local) and select More > Hour from the first set of values (i.e. 9).
- On the Marks card, select Square from the Shape drop-down menu.
From the Data pane, drag Job Queued Duration to Colour on the Marks card. Right-click in the field and select Measure > Average.
From the Data pane, drag Job ID to Size on the Marks card. Right-click in the field and select Measure > Count (Distinct).
Do more with this data source: Using Tableau Prep, you can join Admin Insights data sources on the following fields to get more visibility into your site. If you're analysing data from multiple Tableau Cloud sites, you must also join on "Site LUID = Site LUID".
For more information, see Aggregate, Join or Union Data(Link opens in a new window) in Tableau Prep Help.
Permissions contains the effective permissions for all users and content on the site. Administrators can use the data source to identify gaps in permissions security and ensure that only the appropriate users can access content items.
Note: Site roles determine the maximum capabilities a user can have. For example, a Viewer can’t web edit, even if they’re allowed in a user or group rule. Based on the order that permissions are evaluated, users may have different capabilities than listed in the data source. For more information, see Effective permissions.
Example: Which users and groups have access to content?
Connect to the Permissions data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Item Type, Item Name, Item Parent Project Name, and Controlling Permissions Project Name to the Rows shelf. This creates a hierarchical view of your site content and shows how permissions are determined, for example, if permissions are set at the project level or on individual pieces of content.
From the Data pane, drag Grantee Name and Grantee Type to the Rows shelf. Adding these dimensions shows the users and groups with access to the content.
From the Data pane, drag Capability Type to the Rows shelf. The capabilities for users and groups are displayed.
Do more with this data source: Using Tableau Prep, you can join Admin Insights data sources on the following fields to get more visibility into your site. If you're analysing data from multiple Tableau Cloud sites, you must also join on "Site LUID = Site LUID".
Joining Permissions with other Admin Insights data sources may result in large datasets if the site has more than 1000 users or if you assign permissions to multiple large groups on individual content assets. A large group contains hundreds of members.
Join Site Content to Permissions on "Item LUID = Item LUID" (left join)
Join Permissions to TS Users on "User LUID = User LUID"
Join Permissions to Groups on "Grantee LUID = Group LUID" (right join)
Tip: To streamline analysis, delete the All Users group rule or edit the rule to remove permissions.
For more information, see Aggregate, Join or Union Data(Link opens in a new window) in Tableau Prep Help.
The Subscriptions data source provides comprehensive details about subscriptions on the site, including the name of the creator and recipient, content item, job status and schedules. Admins can use this data to improve the viewing experience for users who access content through subscriptions.
As of February 2024, the Subscriptions data source includes Tableau Pulse information for your site. The "Subscriber Group Name" and "Subscriber Group LUID" fields have been included in the User folder. These fields display the group name and LUID when a user is following a metric as part of a group.
Example: What are the most popular Pulse metrics?
Use the following steps to create a view that displays the most popular Tableau Pulse metrics.
Connect to the Subscriptions data sources using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Item Type to the Filter shelf, and then select the Metric tick box in the dialogue.
Drag Item LUID and Item Name to the Rows shelf.
Drag CNT(Subscriber User LUID) to the Columns shelf.
From the toolbar, select the Sort Descending button to sort the X axis.
Note: The viz displays subscribed users individually. To view users subscribed by group, use the "Subscriber Group Name" and "Subscriber Group LUID" fields.
From the menu, click Analysis > Create Calculated Field.
Name:
Is Group Follow
Calculation:
NOT ISNULL(Subscriber Group LUID)
From the Data pane, drag Is Group Follow to Colour on the Marks card.
Drag Subscriber Group Name to Detail on the Marks card.
Tip: Understanding which users chose to follow a metric themselves, rather than being added by others, can help identify which metrics are naturally popular.
From the menu, click Analysis > Create Calculated Field.
Name:
User Self-Followed
Calculation:
NOT [Is Group Follow] AND [Created By User Email] <> [Subscriber Email]
From the Data pane, drag User Self-Followed to Colour on the Marks card.
Example: How often do users receive subscriptions?
Use the following steps to create a view that displays how often users receive subscriptions.
Connect to the Subscriptions and TS Events data sources using one of the procedures listed in Connect to Admin Insights data.
Select Data > Edit Blend Relationships.
In the Blend Relationships dialog, set the primary data source to Subscriptions, and select the Custom radio button.
Click Add.
In the Add/Edit Field Mapping dialog, map Subscriber Email to Actor User Name, and click OK.
Click OK to exit the Blend Relationships dialog.
From the Data pane, drag Subscriber Email, Subject, and Last Sent (local) to the Rows shelf.
From the Data pane, drag Number of Events to the Columns shelf.
Verify that Item LUID, Item Type, and Actor User Name are the linking fields in the Data pane. If there are broken links, click the icon next to the field name to link the two data sources.
- From the Data pane, drag Subscription Status to Colour on the Marks card.
Do more with this data source: Using Tableau Prep, you can join Admin Insights data sources on the following fields to get more visibility into your site. If you're analysing data from multiple Tableau Cloud sites, you must also join on "Site LUID = Site LUID".
For more information, see Aggregate, Join or Union Data(Link opens in a new window) in Tableau Prep Help.
Tokens contain information about active, unexpired user tokens on the site, including personal access tokens (PATs), refresh tokens and OAuth tokens. Site administrators can monitor token usage and expiry through the data source, rotating essential tokens as needed.
The following tokens are included in the data source:
OAuth Database – Manage the access tokens used for OAuth connections. The tokens are valid until a Tableau Cloud user deletes it or the data provider revokes it. For more information, see OAuth Connections.
OAuth Client – Manage refresh tokens used by connected clients, such as Tableau Desktop and Tableau Prep. For more information, see Access Sites from Connected Clients.
Personal access tokens (PATs) – Manage long-lived authentication tokens used to sign in to Tableau Cloud, such as automated scripts and tasks that are created with the Tableau REST API. For more information, see Personal Access Tokens.
At any time, site administrators can quickly revoke a token by unlicensing a user with the undesired token, with the caveat that new tokens have to be created when the user is relicensed. For steps on removing or revoking specific types of tokens, follow the links in the previous section.
Example: When were OAuth Database tokens last updated?
The following example measures token rotation compliance within an organisation.
Connect to the Tokens data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Token Type to the Filter shelf. Select the OAuth Database tick box and click OK.
Drag Database Type, Database Username and Last Updated to the Rows shelf.
On the Rows shelf, right-click Last Updated and select Exact Date from the context menu. Change the field from continuous to discrete.
From the menu, click Analysis > Create Calculated Field.
Name: Days Since Last Update
Calculation:
ROUND(TODAY()-[Last Updated])
Click OK.
From the Data pane, drag Days Since Last Update to the Rows shelf. Change the field from continuous to discrete.
Example: When do embedded OAuth database tokens expire?
To prevent disruptions such as view load errors and failed extract refreshes, it's important to monitor the expiration of embedded OAuth database tokens. The following example shows how to identify tokens nearing expiration, enabling users to refresh their credentials proactively.
Note: Tableau doesn't store expiration times for OAuth database tokens. To obtain this information, contact your database administrator to verify expiration details for each database type.
Connect to the Tokens data source using one of the procedures listed in Connect to Admin Insights data.
From the Data pane, drag Token Type to the Filter shelf. Select the OAuth Database tick box and click OK.
Drag Database Type and Owner Email to the Rows shelf.
From the menu, click Analysis > Create Calculated Field. In this example, we use a Snowflake database with a 90-day expiration period.
Name: Expires At (all tokens)
Calculation:
IF [Token Type] = 'OAuth Database'
THEN
IF [Database Type] = 'snowflake'
THEN DATEADD('day', 90, [Last Updated])
// add conditions for other database types here //
ELSE NULL
END
ELSE [Expires At]
END
From the menu, click Analysis > Create Calculated Field.
Name: Days Until Expiration
Calculation:
DATEDIFF('day', TODAY(), [Expires At (all tokens)])
Drag Days Until Expiration to the Rows shelf. Change the field from continuous to discrete.
Drag Days Until Expiration to the Filters shelf. Select All Values, setting the Maximum to 14. This filter’s tokens expiring in the next 14 days or those already expired. Adjust as needed.
Use the resulting values to contact users whose tokens are set to expire soon.
Example: Which users own PATs on the site?
The following example displays the names and site roles of users who own PATs on the site. You can adjust the filter for other token types.
Connect to the Tokens and TS Users data sources using one of the procedures listed in Connect to Admin Insights data.
Select Data > Edit Blend Relationships.
In the Blend Relationships dialog, set the primary data source to Tokens, and select the Custom radio button.
Click Add.
In the Add/Edit Field Mapping dialog, map Owner Email to User Email, and click OK > OK.
From the Data pane, drag Token Type to the Filter shelf. Select the PAT tick box and click OK.
From the Data pane, drag Username, User Site Role, Expires At and Last Used At to the Rows shelf.
- Verify that User Email is the linking field in the Data pane. If there is a broken link, click the icon next to the field name to link the two data sources.
On the Rows shelf, right-click Expires At and select Exact Date from the context menu. Change the field from continuous to discrete.
Repeat step 7 for Last Used At.
Do more with this data source: Using Tableau Prep, you can join Admin Insights data sources on the following fields to get more visibility into your site. If you're analysing data from multiple Tableau Cloud sites, you must also join on "Site LUID = Site LUID".
To see the site role of the token owner, join Tokens to TS Users on “Owner Email” = “User Email”
To see group membership of the token owner, join Tokens to Groups on “Owner Email” = “User Email”
For more information, see Aggregate, Join or Union Data(Link opens in a new window) in Tableau Prep Help.