Create a Group and Add Users to It


As a site admin, you can organize Tableau Cloud users into groups to make it easier to manage multiple users. Groups can also be used by users (such as site admins, project owners, and content owners) to apply permission rules for Tableau content.

Users can belong to multiple groups.

Create a group

  1. On a site, click Groups, and then click New Group.

  2. Type a name for the group.

    New Group form with options for group name, on demand access, and licensed users.

  3. Optionally, do one or both of the following:

    1. If your site is licensed with the Embedded Analytics usage-based model, select the Allow on-demand access check box to enable the on-demand access capability for embedding workflows.

      For more information, see one of the following: On-demand access using connected apps with direct trust(Link opens in a new window) or On-demand access using connected apps with OAuth 2.0 trust(Link opens in a new window).

    2. Select Grant role on sign in and select a minimum site role for the group. For more information, see Grant License on Sign In.

  4. Click Create.

Note: Every user (excluding users with on-demand access) added to a Tableau Cloud site becomes a member of the All Users group automatically. The All Users group exists in every site by default. You cannot delete this group, but you can set permissions for it.

Add users to a group (Users page)

  1. On a site, click Users.

  2. Select the users you want to add to the group, and then select Actions > Group Membership.

    A user list with display names, two of which are selected to be part of a group action.

  3. Select the groups and then click Save.

Add users to a group (Groups page)

  1. From the left navigation pane, click Groups, and then click the name of the group.

  2. On the Group's page, click Add Users.

    Group page showing the Add Users button.

  3. Select the users to be added, and then click Add Users.

    4. Add Users screen with a checkbox before each user name.

Dynamic group membership using assertions

Beginning in June 2024 (Tableau 2024.2), if you have OIDC or SAML authentication configured or use Tableau connected apps for embedding workflows, you can dynamically control group membership through assertions. When configured, at runtime during user authentication, Tableau receives the assertion and then evaluates membership in groups and thus the content whose permissions are dependent on those groups.

The process to dynamically control group membership through assertions requires 1) enabling the setting and 2) ensuring the group membership claims are included in the assertions.

Step 1: Turn on the setting

For security purposes, group membership is only validated in an authentication workflow if the site setting is turned on.

  1. Sign in to Tableau Cloud and click Settings > Authentication.

  2. Under Assertions for Group Membership heading, select the Allow group assertions to enable group membership through SAML, OIDC, or JWT assertions check box.

For more information about site settings, see Assertions for Group Membership.

Step 2: Ensure group membership claims are included in the assertion

Two custom group membership claims must be included in the respective OIDC, SAML or JWT assertion to specify group membership. The two custom group membership claims are:

  • Group: https://tableau.com/groups

  • Group names. These names should match local group names in Tableau Cloud exactly.

Note: Group sets can't be asserted.

For example assertions, refer to one of the following sections:

Back to top