Tableau Server on Windows Help

Beginning in Tableau Server 2024.2, you can create a container for your groups using group sets. A group set can contain one or more groups and be used to apply more granular rules for content permissions that are dependent on the group set. When enabling capabilities based on a group set, users in the groups that belong to the group set must be members of all the groups for the capability to be evaluated. In this way, group sets enforce AND logic.

Benefits of group sets:

• You can mix and match synchronised groups with local groups in permission rules to enable more dynamic access control scenarios.
• Use AND logic for groups in permission rules, which can simplify access control in some scenarios.

Notes:

• Group set permission rules are evaluated after user and group rules. For more information about those rules, see Evaluate permission rules.
• Group sets can only be created by server administrators.

Turn on group sets

Before group sets can be used for permissions, group sets settings must be enabled.

1. Sign in to Tableau Server as server administrator.
2. Navigate to the Settings page.
3. Under the Group Sets section, select the Allow group sets tick box.

   

After enabling group sets, a dedicated Group Sets page displays in the navigation pane.

Create group sets

To create a group set, navigate to the Group Sets page and create a group set as you would a group.

1. Sign in to Tableau Server as server administrator.
2. Navigate to the Group Sets page and click the New Group Sets button.
3. Enter a name for the group set and click Create.

   

4. In the Group Sets table, click the name of the group set you just created and click the Add Groups button.
5. From the list of available groups, select the groups you want to add to the group set and click the Add button.

   

Set permissions on group sets

To use group sets, as a site admin, project leader or content owner, add or edit the permissions of the content to use the group set.

For example, suppose you are the owner of the "Batters" workbook. To apply permissions based on the group set, do the following:

1. Go to the workbook and select Permissions from the actions menu.
2. In the Permissions dialog box, click the Add Group/User Rule button, and do the following:
   1. In the text box, enter the group set name, for example "All Contractors".
   2. Select the desired capabilities in the template.

   3. Click Save.

      

When permissions are applied using the group set model, you can enforce a more fine-grained access control.

For example, you might restrict access to different "Batters" workbook views based on a user’s regional group affiliation:

• North Region view:
  • Group set is called North Region
  • Groups in the group set: All Regions and North Region
• South Region view:
  • Group set is called South Region
  • Groups in the group set: All Regions and South Region
• East Region view:
  • Group set is called East Region
  • Groups in group set: All Regions & East Region
• West Region view:
  • Group set is called West Region
  • Groups in the group set: All Regions and West Region

For more information about permissions, see Configure Projects, Groups, Group Sets and Permissions for Managed Self-Service.