400 998 0226设置用户的站点角色
- 版本 ：2022.1 及更高版本
将用户添加到 Tableau Server 上的站点（独立于其许可证类型）时，必须向他们应用站点角色。站点角色表示用户可以对站点具有的最大访问权限级别。除了内容权限之外，网站角色还确定谁可以发布、与已发布的内容交互或仅查看已发布的内容，或者谁可以管理网站的用户和管理网站本身。
用户许可证、站点角色和内容权限如何协同工作
用户的许可证类型、站点角色和内容权限的交集决定了用户对 Tableau 站点的访问级别。
注意：“服务器用户”选项卡上标头顶部的许可证级别计数可能与“最大用户角色”筛选器下的计数不同，因为某些用户在站点中具有不同的角色。
许可证类型与用户相关联。要分配给用户的站点角色决定了用户所需的许可证类型。
在 Tableau Server 上的多站点环境中，用户的许可证适用于该用户所属的所有站点。
站点角色也在用户级别设置。在多站点环境中，可以在每个站点上分配站点角色。例如，同一用户可以在一个站点上具有“站点管理员创建者”站点角色，在另一个站点上具有“查看者”站点角色。
站点角色定义用户可以拥有的最大功能。
网站角色的最大功能是否可供用户使用取决于对内容资源（项目、数据源、工作簿）设置的权限。
例如，假设用户对网站具有以下访问权限：
创作者许可证（由于他们在其他网站上的访问权限）
资源管理器站点角色（在此站点上）
保存项目的权限功能（在此站点上）
在这种情况下，即使许可证允许在 Web 编辑环境或 Tableau Desktop 中连接和创建新数据源，并且权限规则允许他们在项目中保存，其站点角色也会阻止他们进行保存，因此其有效权限不包括保存功能。用户无法将内容发布到网站。
同样，即使用户具有创建者许可证和创建者站点角色，如果他们在至少一个项目上没有保存功能，他们也无法向站点发布任何内容。
有关详细信息，请参阅权限。
更改用户的站点角色
以服务器或站点管理员身份登录到站点，然后转到“用户”区域。
如果您是站点管理员，但看不到“用户”区域，请与服务器管理员联系，了解他们是否拒绝了站点管理员的用户管理功能。
选择用户，然后选择“操作>站点角色”。
选择新的站点角色，然后单击“更改站点角色”。
You can hover the pointer over the information icon to display a matrix that shows the maximum level of general capabilities each site role allows. For more information, continue to General capabilities allowed with each site role.
General capabilities allowed with each site role
The following table lists the license types as of version 2018.1, the highest level of site role allowed with each, how each site role maps to its pre-2018.1 equivalent; and summarizes the maximum capabilities each site role allows.
What this article covers and where to find what’s not covered here
This information focuses on site roles and is more generalized. For a list of common specific tasks available per license role, see the matrix on the For Teams & Organizations tab on the Tableau pricing page.
This information describes site roles as of version 2018.1. To learn more about how core-based licensing relates to user-based licensing, how licenses transfer, or other specific licensing transition scenarios, start with the following topics:
Tableau site roles as of version 2018.1
| Site role name as of version 2018.1 | Previous site role name | Maximum capabilities this site role allows |
|---|---|---|
Site roles that use a Creator license | ||
—Users with these site roles have access to Tableau clients such as Tableau Prep, Tableau Desktop, Tableau Bridge, and Tableau Mobile. | ||
Server Administrator | Server Administrator | Available on Tableau Server only; not applicable to Tableau Online. This site role always occupies the highest license activated on the server between Creator and Explorer. It allows unrestricted access to the configuration settings for the Tableau Server browser environment, all sites on the server, users and groups, and all content assets, such as flows, projects, data sources (including connection information), and workbooks. Connect to Tableau published data sources or external data, from the browser, Tableau Desktop, or Tableau Prep; create and publish new data sources; author and publish workbooks. |
-- | This is the highest level of access for Tableau Online. Unrestricted access to content as described above, but at the site level. Connect to Tableau or external data in the browser, Tableau Desktop, or Tableau Prep; create new data sources; build and publish content. On Tableau Server, server administrators can determine whether or not to allow site administrators to manage users and assign site roles and site membership. By default, on Tableau Server, and always on Tableau Online, site administrators are allowed these capabilities. | |
-- | This is similar to the former Publisher site role, but allows new features. This site role offers non-administrators the maximum level of content access. Connect to Tableau or external data in the browser, build and publish flows, data sources and workbooks, have access to Dashboard Starters, and use interaction features on published views. Can also connect to data from Tableau Prep or Tableau Desktop, publish (upload/save) and download flows, workbooks and data sources. | |
Site roles that use an Explorer license | ||
—Users with these site roles can access the server from the browser or Tableau Mobile. | ||
Server Administrator | N/A | Tableau Server only; not applicable to Tableau Online. If Explorer is the highest license type activated on the server when a new server administrator user is created, the user’s site role is Server Administrator; however, the user will not have the full connecting and publishing capabilities that come only with the Creator license. With the Explorer license a Server Administrator has unrestricted access to the configuration settings for the Tableau Server browser environment, all sites on the server, users and groups, and all content assets, such as projects, flows, data sources (including connection information), and workbooks. However, with the Explorer license, a Server Administrator can’t connect to external data from the browser to create a new data source. They can author or publish workbooks and data sources from Tableau Desktop. (they function as an Explorer (can publish) site role with regards to publishing). |
Site Administrator Explorer | Site Administrator | Same access to site and user configuration as Site Administrator Creator, but can’t connect to external data from the web editing environment. Can connect to Tableau published data sources to create new workbooks, and edit and save existing workbooks. |
Explorer (can publish) | Publisher | Can publish workbooks from the web using existing data sources, browse and interact with published views, and use all interaction features. In the web editing environment, can edit and save existing workbooks. Cannot save new standalone data sources from data connections embedded in workbooks, and cannot connect to external data and create new data sources. |
Explorer | Interactor | Can browse and interact with published views. Can subscribe to content, create data driven alerts, connect to Tableau published data sources and open workbooks in the web authoring environment for ad-hoc queries, but they can’t save their work. |
Read Only | Viewer | This site role is available only in version 2018.1, for transitioning users to the user-based Viewer (or other) license and site role. Any users in the Read Only site role prior to upgrading to version 2018.2 or later are reassigned to the Viewer site role. In 2018.1 versions, Read Only users can see and subscribe to published views others have created. Can’t use other interaction features or save custom views. |
Site roles that use a Viewer license | ||
Viewer | N/A | Can see published views others have created and use most interaction features. Can subscribe to views and download as images or summary data. Can’t connect to data, create, edit, or publish content, or set data alerts. For a list of specific capabilities, see the Viewer column in the matrix on the Tableau pricing page. Note: Although the Viewer site role existed in previous versions, the new Viewer site role has additional capabilities. |
Other site roles | ||
Unlicensed | Unlicensed | Unlicensed users can’t sign in to Tableau Server or Tableau Online. Users are assigned the Unlicensed role in the following circumstances:
|
Who can publish content
The following site roles allow the specified level of publishing access.
Server Administrator (Tableau Server only); Site Administrator Creator; and Creator allow full connecting and publishing access.
This includes connecting to data and publishing new flows, new workbooks and new data sources from Tableau Desktop and the web editing environment. The site roles also allow editing and saving existing published workbooks, or publishing updates to existing data sources.
Explorer (Can Publish) and Site Administrator Explorer have limited publishing capabilities, as described in General capabilities allowed with each site role.
Explorer, Viewer, Read Only, and Unlicensed do not allow publishing.
Site roles and Active Directory import and synchronization
When you import users from an external directory like Active Directory, you can specify the site role. If a user is not yet a member of any site on the server, the user is added to the site with the assigned role. When you synchronize groups from an external directory, the site role is applied through the Minimum Site Role setting on the Groups - Details page.
Note: In the context of user and group synchronization, Tableau Server configured with LDAP identity store is equivalent to Active Directory. Active Directory synchronization features in Tableau Server function seamlessly with properly configured LDAP directory solutions.
If a user already exists in a Tableau Server site, the site role assigned during the import or sync process will be applied if it gives the user more access in a site. Importing or synchronizing AD users and groups can promote a user's site role, but does not demote a user's site role.
If a user already has the ability to publish, that ability is maintained.
The matrix below shows the rules applied for site roles on import.
Note: The Import Site Role row abbreviated headers indicate the site role specified for import. The Current Site Role column headers represent the current user site role. The table values represent the abbreviated resulting site role.
Site Administrator: SA
Site Administrator Creator: SC
Site Administrator Explorer: SE
Creator: C
Explorer: E
Explorer (Can Publish): EP
Viewer: V
Unlicensed: U
| Current Site Role | |||||||
|---|---|---|---|---|---|---|---|
| Import Site Role | SC | C | SE | EP | E | V | U |
Site Administrator Creator (SC) | SC | SC | SC | SC | SC | SC | SC |
Site Administrator Explorer (SE) | SE | SE | SE | SE | SE | SE | SE |
Creator （三） | 南卡罗来纳州 | C | 硒 | C | C | C | C |
资源管理器（可以发布） （EP） | 南卡罗来纳州 | C | 硒 | 断续器 | 断续器 | 断续器 | 断续器 |
资源管理器 （五） | 硒 | C | 硒 | 断续器 | E | E | E |
观众 （五） | 硒 | C | 硒 | 断续器 | E | V | V |
没有执照的 （U） | 硒 | C | 硒 | 断续器 | E | V | U |