Sharing, Governance, and Analytics Best Practices
Publishing and permissions
This domain covers how work is shared and governed on Tableau Server/Cloud. Know projects, permissions (capability-based: view, filter, download, publish, etc.), and how permissions inherit down a project hierarchy. Understand workbooks vs. data sources as publishable assets, extract refresh schedules, and subscriptions. Know the difference between row-level security implemented via user filters and permission-based access.
Governance and best practices
Good governance balances access with trust: certified data sources, clear naming, documented metrics, and version control. Understand data source certification, lineage, and how user filters restrict rows per viewer. Know that published data sources centralize logic so many workbooks share one definition. Be aware of performance practices: extracts over live for large data, limiting marks, and avoiding unnecessary blends.
Traps to watch
- Assuming publishing a workbook also shares its embedded data source logic for reuse - publish the data source separately.
- Confusing permission inheritance with explicit overrides.
- Thinking a user filter is a security boundary if the underlying data source is downloadable.
- Forgetting that extract refresh schedules live with the published data source, not the workbook.
Rule of thumb
Certify what you trust, centralize what you repeat. Publish shared logic as a certified data source, restrict sensitive rows with user filters, and review permissions at the project level before granting broad access.