Tableau BlogModify

Tableau puts self-service visual analytics within reach of everyone, from small businesses with just a few licenses to massive enterprises deploying it across their entire organization. But as adoption grows, activity increases. Users generate prolific amounts of content. More dashboards are rendered, more databases are queried. Groups and permissions become more complex. Invariably, a point comes when help is needed to lead, organize, and shepherd these efforts—lest they devolve into an ungoverned mess that does more harm than good.

Having spent a good portion of my career as a Tableau administrator myself, I believe that every admin has three core jobs: Ensure that a platform is safe, functional, and valuable to its users. This means securing the platform from bad actors (external or internal), complying with regulatory requirements, monitoring for operational issues and performance degradations, and ensuring everyone gets the most value by using the platform efficiently.

Observability for enterprises

Doing all those things is easier said than done, especially for large deployments with hundreds, or even thousands, of users working across time zones, geographies, and different sites. When the platform you administer reaches this scale, the traditional built-in tools and processes that worked well at the beginning often just aren’t fit for purpose anymore. Working one-on-one with users and clicking through pages manually can work when you have hundreds of users, but it’s not sustainable when you have thousands. It’s at this point that admins need true observability—access to data about what is happening inside their application at scale. For many admins, this data-based approach means integrating event logs into SIEM tools for monitoring, data warehouses for usage analytics, and building automation to execute tasks autonomously.

For some time, the Activity Log feature of Tableau Cloud has helped meet some of those needs. With Tableau 2025.3, a huge step forward is delivered in giving Tableau Cloud admins more observability data than ever before: the Platform Data API!

Introducing the Tableau Cloud Platform Data API

Accessible via new endpoints in Tableau Cloud Manager (TCM), the Platform Data API provides a central, unified way to retrieve event log data from your entire Tableau Cloud deployment. Want to see who logged into TCM to create a new site? There’s auditing for that. How about a permissions change someone made to their workbook? You can pull that data, too. What about monitoring extract refreshes? We’ve got you covered (including the ones that run on Bridge)!

Unlike "push" integrations that only support specific platform vendors, our API allows you to "pull" data down to store, integrate, and analyze it using the systems you prefer. This platform-agnostic approach means more customers can benefit from this observability data. It also gives our partners and DataDev community a standardized way to create new tools and products that enrich the Tableau ecosystem for everyone.

I'm excited to share that this feature is available for all customers of Tableau Cloud! This means that for the first time ever, any customer, regardless of edition, can access this same observability data using the new API. We know how important and valuable this data is, and we want to maximize its benefit for you. For our Tableau Enterprise and Tableau+ edition customers with strict monitoring and resiliency requirements, you’ll enjoy access to near real-time data to ensure you’re always on top of anything that needs immediate attention, and extended retention periods that keep the data available for a full year—just in case.

What's next for enterprise observability

The Platform Data API is just the first step in our journey to provide you with a comprehensive set of tools for managing your Tableau Cloud deployment. We are actively working on new features that will further expand the site's observability options:

• Entity Snapshots: While event data can tell you what's happened, it can’t tell you what things are like now. We’re working to supplement the eventing data with "snapshots" of your deployment's entities—such as workbooks, data sources, users, and groups. This will allow you to answer questions like, "Which workbooks haven't been used in the last six months?" and "What users are no longer active?"
• Accelerated Admin Insights: As we build this robust data foundation, we are committed to improving our existing admin features. We plan to re-base Admin Insights on this new, more efficient data pipeline, which will allow us to accelerate the data refresh time and provide you with faster, more timely information about your deployment.

The Tableau Cloud Platform Data API is the foundation for a new level of control and insight. It's available to all Tableau Cloud customers, helping everyone—from individual teams to large enterprises—build a more secure, efficient, and data-driven analytics environment. It's the key to truly understanding your deployment at scale.

Get started with the Platform Data API today

You can learn more about how to use the new Platform Data API by reading our Activity Log overview in the Help documentation. Detailed technical specs for the API calls can be found in the Administrative Methods section of the TCM REST API, and our official Postman collection will help you get up and running quickly. And as always, you can join us in the DataDev Slack workspace if you need some help! 

What are Tableau Cloud Custom Domains?

Custom Domains (per site) is a new feature in Tableau Cloud that allows site administrators to configure a subdomain, like analytics.example.com, enabling them to easily embed and access published content. With a custom domain, they can efficiently route stakeholders to Tableau Cloud content, offering an organization-specific URL subdomain that maintains their brand identity instead of having to remember and solely depend on the complicated and non user-friendly pod url's of today. 

Key Benefits for Tableau Customers

Seamlessly Embed Your Analytics
Custom Domains particularly resolves instances where third-party cookies are blocked by default in some browsers for embedding customers. Tableau Cloud Custom Domain feature resolves these 3rd party cookie issues by allowing site administrators to configure a subdomain of their own, and thus the embedded content comes from the customer owner domain (aka 1st party). 

Strengthen Your Brand Identity and Security
Custom domain reinforces this by presenting your Tableau content under your company's own URL. This provides a more professional and trustworthy experience for your employees, partners, and customers. vs. embedding. Even if browsers are not blocking by default, this enables them to embed and access published content without exposing Tableau site details resolving Safari, Chrome and other browsers and addressing their 3rd party cookies' privacy and security concerns.

Simplify Access for Everyone
With a custom domain, you can provide a simple, memorable web address for your stakeholders to access their dashboards and reports. This makes it easier to share links and direct traffic to your Tableau Cloud site.

How to get started with Custom Domains

For this Tableau Cloud feature Site Admins can create and configure Custom Domains in site settings. There is no additional cost to Custom Domains feature. Customers/Site Admins can utilize and set up Custom Domains on any of their sites by going to the individual sites settings for each site.

Note: To add a custom domain to Tableau Cloud, you must meet the following user and TLS certificate requirements. Full info and steps for setup are in the online docs, the summary below is just to get you started.

Requirements: 

• Administrator access to your Tableau Cloud site.
• Administrator privileges to the DNS configuration of the parent domain.
• While not required, it is a good idea to acquire a valid TLS certificate chain file and private key from a trusted authority (for example, Verisign, Thawte, Comodo, GoDaddy) ahead of starting the setup. It is also a good idea to give a heads up to the IT/DNS team as they will need to update the records once the custom domain dns info is provided during setup. 

To setup Custom domain (per site), sign in to the Tableau Cloud site as an administrator, go to settings and follow the steps under the Custom Domain section.

If you’re ready to experience Tableau Cloud yourself, start a free trial.

The migration journey from Tableau Server to Tableau Cloud can be a daunting experience. Without a reliable process, the migration can be a time-consuming and error-prone endeavor, potentially leading to a multitude of issues. To help solve this challenge, Tableau offers a suite of tools designed to facilitate content movement, both between Server environments and Server to Cloud in the form of the Migration SDK, the Cloud Migration App, and the Content Migration Tool. 

While they share the common goal of simplifying content transfer, they differ significantly in their design, target audience, capabilities, and intended use cases. Understanding these distinctions is crucial for selecting the right tool for your content migration and management.

Overview of Tableau Tooling 

Here's a breakdown to help clarify which tool might be right for you when considering a move from Tableau Server to Tableau Cloud:

• Tableau Migration SDK: This is a Software Development Kit (SDK), a toolbox for developers to build their own custom migration applications. It is the recommended tool for the technical movement of users and content during a migration from Tableau Server to Tableau Cloud. The Migration SDK is an API-driven engine with a networking layer and uses hooks like Filters, Mappings, and Transformers. It is not a turnkey solution or a pre-built application and requires customization and development effort. It's designed for junior level developers and above who are familiar with Tableau and have experience in Python or .NET. It's intended for a one-time migration event from Server to Cloud, not recurring content promotion.
• Cloud Migration App: This is an open-source desktop application built on the Tableau Migration SDK. It is designed to allow administrators to copy content and users from Tableau Server to Tableau Cloud with ease, specifically simplifying the process for administrators with smaller deployments of around 100 workbooks. A major limitation of this app is that it only has basic features, like user mapping, but lacks functionality such as filtering, renaming, and authentication types.
• Tableau Content Migration Tool (CMT): This Windows-only desktop app with console runner provides a user interface and is designed for copying or migrating content between Tableau Server sites or between Tableau Cloud sites. It is explicitly not recommended for migrations when moving from Tableau Server to Tableau Cloud.
   

Comparison 

Choosing the Right Tool for the Job

The choice of migration tool depends heavily on the specific scenario, the size and complexity of the Tableau environment, the technical expertise available, and the specific content types that need to be migrated. In general, the scenarios below should help guide the right choice when deciding on what to use.

Server to Cloud Migration:

• Customers with small deployments (around 100 workbooks), limited development resources, and core content types (users, groups, projects, data sources, workbooks, permissions, custom views) may find the Cloud Migration App to be the most suitable, straightforward option.
• Customers with larger or more complex Server deployments, significant customization needs, specific content types not supported by the App (e.g. Prep Flows or Virtual Connections in the future), or who require integrating migration into existing workflows should consider using the Migration SDK and building a custom application. This is also the intended path for Professional Services and Migration Partners serving large customers.
• Using the Tableau Content Migration Tool for Server to Cloud migration is not recommended.

Server to Server or Cloud to Cloud Migration:

• The Tableau Content Migration Tool (CMT) is the primary and recommended tool for migrations and content management tasks between Tableau Server sites and between Tableau Cloud sites. Its broad capabilities for content promotion, environment migration, site consolidation, and maintenance make it well-suited for these scenarios.
• The Migration SDK is also able to support Cloud to Cloud migrations with code customization and limitations with embedded credentials and subscriptions, with plans to expand on this functionality in the future.
• The Cloud Migration App is not able to support either Server to Server or Cloud to Cloud migrations.

Ultimately, the three tools provided by Tableau to help with content management and migration are distinct offerings with different use cases and supported scenarios. In general, the rule of thumb is that all Server to Cloud migrations should be done with the Migration SDK or the Migration App, while content migration across Server to Server or Cloud to Cloud should be done with the Content Migration Tool. At the end of the day, organizations should carefully evaluate their specific requirements, technical resources, and migration path to determine the most appropriate tool for their specific needs.

Learn more about best practices for migrating to Tableau Cloud from Tableau Server with the Trailhead Badge for Cloud Migration.

In today's digital landscape, businesses increasingly rely on cloud solutions, often involving sensitive information, including payment card data. This achievement means that Tableau Cloud not only empowers organizations in the financial services industry to leverage their data effectively but also enhances our existing robust security and compliance built into Tableau Cloud.

Tableau Cloud has achieved Payment Card Industry Data Security Standard (PCI-DSS) 4.0 compliance, reinforcing our unwavering commitment to security and ensuring your sensitive payment card data is always protected.

What is PCI-DSS and How Does it Impact Tableau Cloud?

The Payment Card Industry Data Security Standard (PCI-DSS) is a globally recognized set of security standards. Its purpose is to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment. For businesses handling customer payments or financial data, PCI-DSS compliance is crucial for safeguarding cardholder data and maintaining customer trust.

Tableau Cloud plays a vital role as a "service provider" in the PCI-DSS ecosystem, supporting payment processing for other companies. Our customers can now operate with even greater assurance knowing that their data environment within Tableau Cloud meets these rigorous standards.

Tableau Cloud's Commitment to Top-Tier Security

As part of our PCI-DSS compliance, we're proud to share that Tableau Cloud is a Level 1 service provider under PCI-DSS. This is the highest level of compliance, signifying that we meet all 12 technical and organizational controls of PCI-DSS.

To meet this standard, Tableau performs rigorous testing and validation, including:

• An annual on-site assessment and Report on Compliance (ROC) by a Qualified Security Assessor (QSA).
• Quarterly network scans by an Approved Scanning Vendor (ASV) to identify and address any vulnerabilities.
• An Attestation of Compliance (AOC) signed by a senior executive, confirming our adherence to the standards.

Furthermore, Tableau Cloud operates on AWS's Infrastructure as a Service (IaaS) platform and Salesforce’s Hyperforce, both of which are themselves PCI-DSS Level 1 compliant. This means our foundational infrastructure is built on a bedrock of security, with AWS responsible for securing the data centers and physical controls.

The Shared Responsibility Model: A Partnership in Security

Tableau’s PCI-DSS compliance is built on the foundational principle of a Shared Responsibility Model. As the cloud service provider, Tableau Cloud manages the underlying infrastructure and platform, securing areas like network firewalls, data encryption at rest and in transit, vulnerability management, patching, and system activity logging. Conversely, our customers are responsible for securing their own application settings, data, and usage of the service through configurations of secure access, encrypting data during transmission to and from Tableau Cloud, monitoring user activity, and securing any custom integrations.

It is crucial that customers uphold their responsibility under this model for the environment to be fully PCI-DSS compliant. 

To that end, Tableau provides a bevy of tools that can help customers uphold their compliance requirements under the shared responsibility model:

• Customer-Managed Encryption Key (CMEK): This critical feature allows customers to encrypt site data extracts with their own customer-managed, site-specific key.
• Tableau Bridge: Securely connect Tableau Cloud to private network data, including on-premises databases or private cloud data, using HTTPS and WebSockets for reliable, encrypted communication.
• Activity Log: Gain comprehensive visibility into detailed log events, sent directly to your own Amazon S3 bucket. This enables in-depth analysis, auditing, and monitoring of site activities and permission changes, crucial for compliance.
• Robust Access Controls: Tableau Cloud offers a variety of features to ensure only authorized users access your data, including:
  • Multi-Factor Authentication (MFA) for strong verification.
  • Single Sign-On (SSO) for streamlined and consistent authentication.
  • SCIM for automated user provisioning and de-provisioning.
  • User Role/Permission Control to enforce the principle of least privilege.
  • Data Access Control and Row-Level Security (RLS) to restrict data visibility based on user identity.

Key Considerations for Shared Responsibility

Furthermore, in addition to customer responsibilities, it is important to call out the limitations around Tableau’s current PCI-DSS implementation. These limitations must be taken into account by customers as part of their Tableau Cloud implementation in order to be covered by Tableau’s PCI-DSS compliance:

• Customers must use CMEK to encrypt their extracts.
• Only data in the form of data extracts or live connections are supported for PCI-DSS compliance. Using embedded data sources like Excel or CSV files, which cannot be encrypted with CMEK, is not within the scope of this compliance.
• Customers are required to use their own Identity Provider (IdP) for Single Sign-On (SSO).

Understanding these specific points helps ensure that customers can effectively leverage Tableau Cloud's PCI-DSS compliant environment while meeting their own compliance obligations.

Your Trusted Partner in Data Security

At Salesforce, trust is our number one value, a principle that guides everything we do. Tableau Cloud is engineered with security at its core, committed to protecting your sensitive cardholder data. Our comprehensive approach, spanning infrastructure security, robust encryption, and detailed logging, provides a resilient environment for your critical information.

We are dedicated to being your trusted partner on the journey toward compliance and data security. 

For more detailed information, please refer to the Tableau Cloud PCI-DSS Whitepaper, visit our Tableau compliance website and resources, or reach out to your Salesforce account executive.

Want to experience this level of security and compliance? Start a free trial of Tableau Cloud.

How often have you heard, “Without good data, you won’t have good AI?” It sounds simple, but studies show that “ensuring scalable, reliable data” is one of the top analytics challenges organizations face according to the Salesforce State of Data and Analytics Report. This challenge has significant downstream effects. Organizations that cannot confidently confirm they have reliable data cannot confidently adopt AI or self-service capabilities. To scale responsibly around AI and self-service-driven capabilities, organizations need a better process to explore, improve, and validate the data sources that drive them.

This blog provides the tools to monitor your Tableau data sources more effectively and a framework to drive iterative improvements, so you can be more confident in your data.

The framework consists of four steps:

1. Monitor your data
2. Identify a meaningful objective
3. Create and promote data sources
4. Enable your users

Improving data confidence starts with a baseline understanding of your data. Consider one of your top-level Tableau Projects, and ask yourself:

• How many data sources are in that project?
• How do users distinguish trusted, governed sources from experimental ones?
• Is there supporting documentation to help new users understand the data?

If you can’t answer these questions, scaling for AI or self-service discovery may make you nervous. The first step to alleviate these concerns is to monitor and explore your data sources. Any Tableau Cloud Admin can do so by connecting the Data Source Manager Accelerator to your Tableau Cloud Site, and then sharing for other users to see.

Start by reviewing the “Know your data sources” section to see how users can interact with their data.

A published data source makes a single source of data accessible to permissioned users, enabling self-service and Tableau Pulse capabilities. Certified data sources go a step further, assuring users that the data has passed organizational governance standards and can be trusted. Embedded data sources, however, are embedded within a Tableau workbook, making them inaccessible for exploration outside of the dashboard through web-authoring or Tableau Pulse. Monitoring and managing your data assets along these categories will help you assess your readiness to embrace Tableau’s AI and self-service capabilities in your Tableau Sites.

Instead of overwhelming yourself by attempting to improve all of your data at once, focus on achieving short-term wins on meaningful objectives. To identify these use cases, take any potential initiative, a digital whiteboard, and answer the following questions for the initiative:

The initiatives you choose to focus on should confirm all of the above. It should impact relevant organizational goals, use data that can feasibly be brought into Tableau, and demonstrate that analytics can indeed drive meaningful progress. Once confirmed, you have a worthy use case to focus on. Create a designated Tableau Project and follow the next step to equip users with explorable data assets.

Learn more about creating value maps to help select meaningful objections on our website.

You’ve listed the necessary data sources for your initiative in step 2 above, now make sure they are available in your Tableau Site by referring to the Data Source Manager Accelerator. 

Here, all of your data sources are categorized as Certified, Published, or Embedded, as discussed in Step 1. Filter the Accelerator for your Tableau Project, and explore the following sections of the dashboard to learn more about your data.

Embedded Data Sources (bottom right)

On the bottom right, you see all your embedded data sources, sorted by repetitions. Remember, these data sources are embedded within dashboards, meaning they cannot be explored with Tableau Pulse or web-authoring. Review this section to:

1. Consider publishing highly-used embedded data sources to enable features and consistency
2. Redirect embedded dashboard connections to their Published/Certified equivalent, if it exists 

Published Data (bottom left)

On the bottom left, you see all your Published data sources, sorted by user activity. While these data sources enable enhanced Tableau features, they lack any indication of whether the data has passed governance checks and can be trusted. Review this section to:

1. Consider retiring unused data sources
2. Consider certifying highly-used Published data sources
3. For certification candidates, collaborate with data owners and experts to complete the certification checklist

Learn more about how to publish data sources on our website.

Certification Checklist (hover over the checklist on the dashboard)

The certification checklist is your organization’s process for vetting data sources, which ensures users understand why they can trust their data. This checklist typically includes a variety of checks to confirm accuracy of the data and the presence of supporting documentation. While we can’t directly monitor data accuracy with this Accelerator, we can track other variables to help data owners organize their certification efforts. Hover over the checklist on the dashboard to view the following six checklist items for each data source.

• Licensed Owner: Confirms the data owner is still a licensed Tableau user;
• Refreshed Last 30 days: Confirms the data source has been refreshed in the last month;
• Description: Confirms the data source description includes specific background about the data and guides users where to go with questions (format customizable by you);
• Data Source Type: Confirms the data comes from preferred sources and databases;
• Title Format: Confirms the title is legible without special characters;
• Accessed Last 90 days Confirms users still use the data;

Note: This is a starting point. Customize your checklist items by editing the “Score_” calculations in the Accelerator or adding new ones.

Once a data expert vouches for the accuracy of the data, the data owner can use this Accelerator to ensure the necessary supporting documentation is included. These combined checks, done inside and outside of this dashboard, will ensure data sources are ready to receive the Certification label in Tableau.

Certified Data (top)

At the top, you’ll find all data sources given the Certification label on Tableau Cloud, sorted by user activity and an icon confirming compliance with the checklist.

These are your prized data assets. They have been reviewed by a data expert to ensure accuracy, supplemented with supporting resources to address user questions, and have passed organizational governance standards to ensure trust and consistency. Review this section to:

1. Confirm data adoption
2. Ensure compliance with the certification checklist
3. Consider retiring unused data
4. Identify missing data sources from step 2

Learn more about how to certify data sources on our website. 

With a defined symbol to distinguish trusted data and a credible process to back it up, it’s time to enable your users. Start by informing your users via discussion forums, user group meetings, and other channels that they now have access to new, high-quality data sources. Next, teach them best practices on how to validate and explore these data assets by guiding them to free Tableau Modules on Trailhead. Lastly, regularly check the Data Source Manager Accelerator to ensure data adoption levels meet expectations. 

By implementing our four-step framework for a meaningful objective, you have successfully converted the challenge of “ensuring scalable, reliable data” into an ongoing discussion. This dialogue unlocks new features, improves users’ speed-to-insight, and creates a catalog of quality data ready to inform AI and self-service at scale across your business. Now, identify the next meaningful initiative, and repeat the process. Eventually, you’ll flip the narrative and be able to say, “we have great data, so we know we have great AI.”

Download the Data Source Manager for Tableau Cloud Accelerator on the Tableau Exchange to help monitor best practices. 

As 2024 draws to a close, we want to express our heartfelt gratitude to the incredible Tableau Community. Your boundless creativity and innovative ideas have been a constant source of inspiration, driving us to develop products that enhance and enrich your experience. It’s your feedback and collaboration that help us push the boundaries of what’s possible in data visualization and analytics.

Thank you DataFam for inspiring, voting for, and sharing with us about the features released in 2024! This year we released features that address 150+ ideas with 46,000+ points in the Forums, across Tableau Desktop, Online, Tableau Pulse, and more. And we made progress on providing visibility into the ideas on the Tableau Community Forums: This year we have updated more than 2,900 ideas.

Here are some of the features inspired by ideas you submitted on the forums:

Viz Extensions (2024.2) & Table Viz Extension (2024.3)

See this idea on Sankey Charts and Thierry Jakercevic’s idea on tables

You asked, and we delivered—unlock your creativity and speed to insight with the latest updates to table formatting in Tableau. These enhancements, including resizing, sorting, and conditional formatting, are designed to help you visualize and present your data more efficiently and clearly. Together, these features not only streamline your workflow but also enhance the overall clarity and attention to important data points and anomalies.

For developers, Viz Extensions provide a unique opportunity to expand Tableau’s analytics capabilities with custom visualizations. These can be developed using any JavaScript visualization library and easily integrated into Tableau through our Extensions API. This makes it straightforward to deliver personalized visualization tools that can be scaled to every analyst in your organization and shared with the wider Tableau Community.

"Tables in Tableau have always been in the forefront of user feedback. It's a critical means for how our users deliver analytics, and stands to have more dedicated usability improvements. The community advocacy around these themes helped us build the business case with leadership that we should make a more dedicated approach as a Viz Extension, delivering to a variety of feedback on how users specifically wanted to design and format tables inside Tableau. It provided us the quantitation such that we could discuss usability in Tableau with decision makers, and help them rationalize that the investment to this experience is a data driven decision. The ideas forum continues to be how we think about the key issues we want to explore in our long term roadmap and specifically how we can develop the foundations that allow for us to be more responsive to the feedback as we look ahead."

Wilson Po, Product Management Director

We encourage developers to join our DataDev Developer community to share feedback and ideas for new extensions. Developers can learn more about developing new Viz Extensions by learning more about the Tableau Extension API.

Accessibility: Google Fonts in Tableau Cloud (2024.3)

Idea submitted by stelloprint dev

You spoke, and we listened! Support for Google fonts is a significant win for our front-end developers. With these web safe fonts, they can be used without having to install them on all client machines. This feature helps provide a consistent experience across all viewers' browsers, while maintaining the intended look and feel of your data visualizations and dashboards.

 

"Thanks to our community’s input and ideas regarding our product support for web safe fonts. From their requests and feedback, we were able to prioritize and focus on adding new Google fonts to Tableau Cloud. These ten new fonts add new variety and options for our Cloud customers while also being web safe fonts. This adds a huge amount of value for customers needing a consistent representation of their data across browsers."

Rob Thomas, Product Management Senior Manager

Multi-fact Relationships (2024.2)

Idea submitted by Cristhian De la Hoz

The Tableau Community was ecstatic with the release of Multi-fact Relationships! This data modeling capability allows you to combine multiple fact tables and gain insights from complex data models. With Multi-fact Relationships, you can easily connect different data sources and analyze them together, without having to blend them. This is especially useful when you have dimensions that share the same meaning across tables, or when analyzing data that goes through different stages. To use Multi-fact Relationships, simply identify your base tables and create relationships between them and shared dimension tables. With this powerful tool, you can unlock new types of analysis and accelerate your time to insights. 

Say goodbye to linking fields - easily blend data sources with shared tables and trees.