Tableau Server on Windows Help

Beginning in Tableau Server 2024.2, you can create a container for your groups using group sets. A group set can contain one or more groups and be used to apply more granular rules for content permissions that are dependent on the group set. When enabling capabilities based on a group set, users in the groups that belong to the group set must be members of all the groups for the capability to be evaluated. In this way, group sets enforce AND logic.

Benefits of group sets:

• You can mix and match synchronised groups with local groups in permission rules to enable more dynamic access control scenarios.
• Use AND logic for groups in permission rules, which can simplify access control in some scenarios

Notes:

• Group set permission rules are evaluated after user and group rules. For more information about those rules, see Evaluate permission rules.
• Group sets can only be created by server administrators.
• Group sets are not to be used as a group of groups.

Turn on group sets

Before group sets can be used for permissions, group sets settings must be enabled.

1. Sign in to Tableau Server as server administrator.
2. Navigate to the Settings page.
3. Under the Group Sets section, select the Allow group sets tick box.

   

After enabling group sets, a dedicated Group Sets page is displayed in the navigation pane.

Create group sets

To create a group set, navigate to the Group Sets page and create a group set as you would a group.

1. Sign in to Tableau Server as server administrator.
2. Navigate to the Group Sets page and click the New Group Sets button.
3. Enter a name for the group set and click Create.

   

4. In the Group Sets table, click the name of the group set you just created and click the Add Groups button.
5. From the list of available groups, select the groups you want to add to the group set and click the Add button.

   

Set permissions on group sets

To use group sets, as a site admin, project leader or content owner, add or edit the permissions of the content to use the group set.

For example, suppose you are the owner of the "Batters" workbook. To apply permissions based on the group set, do the following:

1. Go to the workbook and select Permissions from the actions menu.
2. In the Permissions dialog box, click the Add Group/User Rule button, and do the following:
   1. In the text box, enter the group set name, for example "All Contractors".
   2. Select the desired capabilities in the template.

   3. Click Save.

      

When permissions are applied using the group set model, you create permissions that affect the users that have membership in all groups in the group set.

For example, you might restrict access to different workbook views based on a user’s regional group affiliation. Suppose you have users who are contractors, contractor managers, full-time employees and full-time managers accessing these workbook views.

Groups that have default permissions to view the workbook: All, North, South, East, West, Full Time and Managers.

• For the North Region Detailed view:
  • Permissions are based on group set: North Region
  • Groups in the group set: Full Time, North

  Outcome: Only full-time employees and full-time managers in the north can see the data in the North Region Detailed view.

• For the All Region Detailed view:
  • Group set is called Managers
  • Groups in the group set: All, Managers

  Outcome: Only contractor managers and full-time managers can see the data in the All Region Detailed view.

For more information about permissions, see Configure Projects, Groups, Group Sets and Permissions for Managed Self-Service.