Was this page helpful?
Yes No
Administer a Site > Create Users and Groups > Set Users' Site Roles

Set Users’ Site Roles

When you add users to a site on Tableau Online, you must apply a site role to them. The site role determines which users or groups can publish, interact with, or only view published content, or who can manage the site’s users and administer the site itself.

In this topic

Who can publish content

Capabilities the site role determines

General capabilities allowed with each site role

Change a user’s site role

Who can publish content

The following site roles allow publishing content:

  • Server Administrator (Available in Tableau Server on-premises only)

  • Site Administrator

  • Publisher

  • Viewer (can publish)

  • Unlicensed (can publish)

    How you enable this role for publishing depends on your server platform.

    • Tableau Server: A system change is required on the computers Unlicensed (can publish) users publish from. For more information, see the corresponding quick fix article.

    • Tableau Online: No additional steps are required.

Users with a site role of Interactor, Viewer, and Unlicensed cannot publish content to the server.

Capabilities the site role determines

The site role is set at the user level (that is, not on content), to cap what a user can do with content site-wide. For example, a person whose site role is Interactor can never publish content from Tableau Desktop, even if a project’s permission rule assigns the Publisher permissions role to a group the user is a member of.

Site roles also determine who can configure the site or server itself. For example only a Site Administrator or Server Administrator can manage users.

General capabilities allowed with each site role

  • Server Administrator (Tableau Server only): The server administrator has full access to all server and site functionality, all content on the server, and all users.

  • Site Administrator: Site administrators can manage groups, projects, workbooks, and data sources (including connection information) for the site. On Tableau Server on-premises, the server administrator determines whether site administrators can add users and assign site roles and site membership. On Tableau Online, site administrators are allowed these capabilities.

    Site administrators also have unrestricted access to the site’s content. A user can be a site administrator on multiple sites.

  • Publisher: Publishers can sign in, browse the server, and interact with the published views. They also can connect to Tableau Online from Tableau Desktop to publish (upload) and download workbooks and data sources. Publishers cannot manage users.

  • Interactor: Interactors can sign in, browse the server, and interact with the published views. They are not allowed to publish to the server.

  • Viewer: Viewers can sign in and see published views on the server but cannot use any interaction features like filtering and sorting. Users with this site role can be allowed only to view and add and view comments.

  • Unlicensed: Unlicensed users cannot sign in to the server. Users are assigned the Unlicensed role in the following circumstances:

    • You import users from a CSV file.

    • The number of available licenses is reached at the time you add or import users.

    • You remove a user who owns content on the site. The user will still own the content but not be able to do anything with it.

  • Viewer (can publish). The user can sign in from Tableau Desktop to publish and download workbooks and data sources, but they cannot interact with content on the server.

  • Unlicensed (can publish). The user can sign in from Tableau Desktop to publish workbooks to the server, but they cannot sign in to Tableau Online directly. In addition, they cannot publish data sources or download them from the server.

See also How Permissions are Evaluated.

Change a user’s site role

By default both server and site administrators can manage user settings. On Tableau Server, server administrators can configure a site to disallow site administrators the ability to manage users.

  1. Sign in to the site, and go to the Users area.

  2. Select the users, and then select Actions > Site Role.

  3. Select the new site role, and then click Change Site Role.

    You can hover the pointer over the information icon to display a matrix that shows the maximum level of general capabilities each site role allows.