This article describes how to connect Azure Data Lake Storage Gen2 and set up the data source.

Before you begin

Before you begin, review the items in the following list.

  • Get your account credentials for Azure Active Directory via OAuth

  • Get the URL for your Azure storage endpoint

  • If you are using OAuth for authentication, you must whitelist "".

Note: This connector uses only the default tenant for your Azure account. To use Azure Data Lake Storage Gen2 resources with Tableau, they must be associated with the default tenant.


Setup a custom OAuth Client to use your company's IT policies

You can fully control your OAuth configuration according to your own IT policies with a custom OAuth client. The option to use your own OAuth client frees you from being tied to Tableau release cycles and Tableau’s OAuth client rotation schedule. For information on how to configure your own OAuth client see, Configure Custom OAuth for a site.

Make the connection and set up the data source

  1. Start Tableau and under Connect, select Azure Data Lake Storage Gen2. For a complete list of data connections, select More under To a Server.

  2. In the tab Tableau opens in your default browser, do the following:

    1. Sign in to Azure Data Lake Storage Gen2 using your Azure account. Choose one from the list, or choose Use another accountto enter your email address or phone number.

    2. Select Accept so that Tableau can access your Azure Data Lake Storage Gen2 data.

    3. Close the browser window when notified to do so.

  3. On the data source page, do the following:

    1. On the Browse tab, enter the Azure storage endpoint for your Azure account.

      Note: The storage account must have “Data Lake Storage Gen2” enabled.

    2. Navigate to the file you want to use and select it.


    • On the File URL tab, enter URL for the file.

About Azure storage accounts

When you use Tableau with Azure Data Lake Storage Gen2, the storage account you use must be set up with at least one of the following:

  • Read permission explicitly granted for the files you want to access (Read / Execute for folders)
  • Storage Blob Data Reader or Storage Blob Data Owner role assigned to the account

For more information about setting up a storage account, see Create a storage account to use with Azure Data Lake Storage Gen2 on the Microsoft site.

When the storage account is configured, it must enable these CORS options for the Blob service to allow proper access from Tableau:

  • Allowed origins set to "*"
  • Allowed methods set to "GET, OPTIONS"
  • Allowed headers set to "*"

An Azure storage account can have multiple endpoints associated with various services. In Tableau, you'll connect to the storage endpoint that is enabled for "Data Lake Storage Gen2".

See also


Thanks for your feedback!