权限功能和模板
- 版本 :2022.1 及更高版本
权限由功能或对内容执行给定操作(如查看、筛选、下载或删除)的能力组成。对话框的“权限规则”区域中的每一行都是一个权限规则。权限规则是该行中组或用户的每个功能(允许、拒绝或未指定)的设置。权限规则具有可用的模板,可以更轻松地快速分配功能。还可以复制和粘贴权限规则。
模板
模板将通常根据常见用户方案(“查看”、“浏览”、“发布”和“管理”)一起分配的功能集分组。分配模板时,其包含的功能将设置为“允许”,其余部分保留为“未指定”。这些模板是累积的,因此“浏览”模板包括“视图”模板中的所有内容以及其他功能。所有内容还具有“无”(将所有功能设置为“未指定”)和“拒绝”(将所有功能设置为“已拒绝”)的模板。
模板旨在作为起点,可以在应用后进行调整。还可以在不使用模板的情况下授予或拒绝功能。在这两种情况下,模板列都会显示“自定义”。
复制和粘贴权限
如果需要将权限规则分配给多个组或用户,则可以从一个规则复制并粘贴到另一个规则。不能从涉及项目主管状态的规则复制或粘贴到该规则上。
打开要从中复制的现有规则的操作菜单 (...),然后选择“复制权限”。仅当规则未处于编辑模式时,此选项才可用。
选择要粘贴的现有规则。还可以通过单击“+ 添加组/用户规则”并选择组或用户来创建新规则。
打开操作菜单 (...),然后选择粘贴权限。
能力
每种内容类型都有特定的功能:
项目
项目只有两个功能和两个模板。在 Tableau 2020.1 之前,Project Leader 被视为一种权限功能,而不是一种设置。有关项目主管以及如何在 Tableau 2020.1 及更高版本中分配他们的详细信息,请参阅项目管理。
视图模板
“视图”允许用户查看项目。如果用户尚未被授予查看功能,则项目将不对他们可见。授予项目的视图功能并不意味着用户可以查看项目中的任何内容,而只是项目本身的存在。
发布模板
“发布”允许用户将内容从 Tableau Desktop 或 Tableau Prep Builder 发布到项目。还需要发布功能才能将内容移动到工程中或将内容从 Web 制作保存到工程中。
练习 册
视图模板
“视图”允许用户查看工作簿或视图。如果用户尚未被授予查看功能,则工作簿将不对他们可见。
过滤器允许用户与视图中的过滤器进行交互,包括仅保留和排除过滤器。缺少此功能的用户不会在视图中看到筛选器控件。
View Comments lets a user view the comments associated with the views in a workbook.
Add Comments lets a user add comments to views in a workbook.
Download Image/PDF lets a user download each view as a PNG, PDF, or PowerPoint.
Download Summary Data lets a user view the aggregated data in a view, or in the marks they’ve selected, and download that data (as a CSV).
Run Explain Data lets a user run Explain Data on marks in editing and viewing mode.
Note that for Explain Data to be displayed as an option when a user selects a mark in a workbook, the feature must also be enabled as a site setting. To make Explain Data available in viewing mode, the feature must also be allowed by the author from within a workbook in Explain Data settings. For more information, see Control Access to Explain Data.
Explore template
Share Customized lets users add their custom views to the list of “Other Views” visible on a workbook.
When this capability is denied, users won’t see the “Make visible to others” option when they create a custom view. For more information, see Use Custom Views. This capability doesn’t impact the ability to share a custom view with the share dialog or by copying the link.
Download Full Data lets a user view the underlying data in a view, or in the marks they’ve selected, and download that data (as a CSV).
Web Edit lets a user edit the view in a browser-based authoring environment.
Note that creating new content in the browser or saving views from the web edit interface requires a specific combination of capabilities. For more information, see Web Editing and Web Authoring.
The Web Editing feature must also be enabled for the entire site or even users with this capability allowed won’t be able to web edit. For more information, see Set a Site's Web Authoring Access.
Publish template
Download Workbook/Save a Copy lets a user download a packaged workbook (as a TWBX). Lets a user save (publish) a copy from the web edit interface as a new workbook.
Overwrite lets a user overwrite (save) the content asset on the server.
When allowed, the user can re-publish a workbook, data source, or flow, or save a workbook or flow in web authoring, thereby becoming the owner and gaining access to all permissions. Subsequently, the original owner’s access to the workbook is determined by their permissions just like any other user.
Create/Refresh Metrics lets a user create metrics on the views in a workbook and lets any metrics that a user creates from those views refresh. For more information, see Create and Troubleshoot Metrics.
Administer template
Move lets a user move workbooks between projects. For more information, see Move content.
Delete lets a user delete the workbook.
Set Permissions lets a user create permission rules for the workbook.
Views
In a workbook that is not in a locked project and does not show sheets as tabs for navigation, views (sheets, dashboards, stories) inherit the workbook permissions at publication, but any changes to permission rules must be made on individual views. View capabilities are the same as those for workbooks, except for Overwrite, Download Workbook/Save a Copy, and Move which are only available at the workbook level.
We recommend showing navigational sheet tabs whenever possible so views continue to inherit their permissions from the workbook.
Data Sources
View template
View lets a user see the data source on the server.
Connect lets a user connect to a data source in Tableau Desktop, Tableau Prep Builder, Ask Data, or web editing.
If a workbook author embeds their credentials to a published data source in a published workbook, they are essentially embedding their Connect capability. Therefore, users can see the data in the workbook regardless of their own Connect capability for that data source. If the workbook author doesn’t embed their credentials to the published data source, the user needs their own Connect capability to the data source to consume the workbook. For more information, see Data access for published Tableau data sources.
A user must have the Connect capability for a data source to use Ask Data and to create Ask Data lenses. For more information, see Enable Ask Data for Sites and Data Sources.
Explore template
Download Data Source lets a user download the data source from the server (as a TDSX).
Cube data sources, like those for Microsoft Analysis Services or Oracle Essbase connections, must be used locally. To download the published data source to Tableau Desktop, the user must have the Download capability. For more information, see Cube Data Sources.
Publish template
Overwrite lets a user publish a data source to the server and overwrite the data source on the server.
Administer template
Delete lets a user delete the data source.
Set Permissions lets a user create and edit permission rules for the data source.
Other content types
View template | Explore template | Publish template | Administer template | |
Flows | View lets a user view the flow. | Download flow lets a user download the flow (as a TFLX). | Run lets a user run the flow. Overwrite lets a user publish a flow and overwrite the published flow. | Move lets a user move content between projects. For more information, see Move content. Delete lets a user delete the content. “设置权限”允许用户为内容创建权限规则。 |
数据角色 | View lets a user view data roles. | 不适用 | “覆盖”允许用户发布数据角色、覆盖已发布数据角色以及编辑已发布数据角色的同义词。 | |
指标 | “视图”允许用户查看指标。 | 不适用 | “覆盖”允许用户覆盖指标并编辑指标的详细信息。 | |
询问数据镜头 | “视图”允许用户查看镜头。 | 不适用 | “覆盖”允许用户编辑镜头。 | |
虚拟连接 | “视图”允许用户查看虚拟连接。 Connect* 允许用户使用虚拟连接连接到数据。 | 不适用 | 覆盖允许用户编辑虚拟连接。 | |
收集 | “视图”允许用户查看集合。 | 不适用 | 不适用 | 不适用 |
*对于虚拟连接,请注意,默认情况下,虚拟连接具有自定义模板,该模板将“查看”功能设置为“允许”,但未将“连接”功能设置为“连接”功能。请务必将“连接功能”设置为“允许”,以便用户可以使用虚拟连接进行连接。