Tableau Architect for Winter ’26
Learning Objectives
After completing this unit, you’ll be able to:
- Apply the Migration SDK to move users, content, and governance from Tableau Server to Tableau Cloud.
- Demonstrate how to integrate AI applications with Tableau using the Tableau MCP.
- Implement user attributes to control data access and personalize embedded Tableau content.
- Configure secure AWS connections in Tableau Cloud using Private Connect.
- Manage authentication and MFA settings for cloud administrators in Tableau Cloud Manager.
Streamline Your Move to Tableau Cloud with Tableau Migration SDK
As organizations move to Tableau Cloud to benefit from innovation, scalability, and security, the Tableau Migration SDK provides a flexible, developer-focused way to migrate users, content, and governance structures from Tableau Server. Designed for Python or .NET developers, the SDK allows you to build custom migration applications, supporting the transfer of workbooks, data sources, and projects while capturing logs and transforming elements in-flight.
The Migration SDK is intended for one-time migrations—not recurring content promotions—and is optimized for customers with larger user bases who need automation and customization. Smaller deployments (fewer than 100 users) may be better served by the manual migration guide, while those without internal development resources can leverage Tableau Professional Services or experienced partners.
While Tableau Server and Tableau Cloud share many similarities, differences in functionality, REST API support, and platform features can affect what can be migrated automatically. The SDK is not a standalone application; some items may require manual handling, and certain technical limitations—like unsupported content types or lack of REST API coverage—should be considered during planning.
By using the Migration SDK, organizations can move confidently to a Cloud-native environment, streamlining administration, enhancing data workflows, and setting the stage for optimized, scalable Tableau Cloud deployments.
Explore Tableau MCP and AI Integration
Tableau MCP (Model Context Protocol) provides a suite of developer tools, APIs, and resources that make it easier to build AI applications that integrate directly with Tableau. It extends the platform beyond visualization, enabling programmatic access to data, metadata, and metrics for smarter, data-driven AI solutions.
Key features of Tableau MCP enable you to:
- Access Tableau data programmatically through the VizQL Data Service (VDS) API, enabling filtering, aggregation, and querying of published data sources.
- Retrieve metadata using the Tableau Metadata API, including field descriptions and schema details for any published data source.
- Integrate Pulse metrics via the Pulse API, including Pulse Metric, Pulse Metric Definitions, Pulse Subscriptions, and Pulse Metric Value Insight Bundles.
- Support AI tools that work with MCP, such as Claude Desktop, Cursor, and others.
- Work across Tableau Cloud and Tableau Server, for any published data source.
Tableau MCP includes a comprehensive set of developer primitives and tools. Using these capabilities, you can build AI-driven applications that query Tableau data directly, access metadata for automated insights, and integrate Pulse metrics into workflows, dashboards, or external systems. This enables organizations to leverage Tableau as a data platform for AI, automation, and advanced analytics—without relying solely on manual dashboards or visualizations.
Customize and Control Data Access with User Attributes
Tableau connected apps allow you to control and personalize data access in embedded content based on user context. By including user attributes—such as role, department, or location—in a JSON Web Token (JWT) and leveraging user attribute functions in workbooks, you can enforce data access policies and tailor the experience for each user.
User attributes serve two key purposes: enforcing data security by ensuring users see only what they’re authorized to view, and enabling personalization by showing content relevant to the user’s role or region. To implement this, a site or server admin must first enable the user attributes setting, configure a connected app, and include attributes in the JWT. Content authors then add the appropriate user attribute functions to workbooks, which ensures that embedded views display only the data allowed for that user.
Using the Tableau Embedding API, you can embed the customized content in external applications, providing users with a personalized experience that aligns with their context. Known limitations include certain restrictions in Tableau Cloud and Server environments, particularly with non-embedding workflows and specific authentication protocols.
Use Private Connect for AWS
Private Connect for AWS lets Tableau Cloud administrators create secure, private connections between Tableau Cloud and AWS-hosted data sources. Built on AWS PrivateLink, these connections use private IP addresses, ensuring that data traffic stays off the public internet. This secure setup helps meet organizational requirements for keeping data traffic within private networks.
You can create private connections, assign them to specific sites, and share connection details with creators and supporting groups. By using Private Connect, organizations can safely integrate AWS-hosted data while maintaining control and security over their cloud environment.
Use Tableau Cloud Manager Authentication
Tableau Cloud Manager (TCM) is a new tool that gives cloud administrators a centralized way to manage and monitor Tableau Cloud environments. TCM provides visibility into site activity, resource usage, and configuration settings, helping organizations maintain performance, security, and compliance across multiple Tableau Cloud sites. By consolidating administrative tasks in one interface, TCM reduces manual effort and improves operational efficiency.
In addition to general management, TCM includes robust authentication and security controls. You can enforce multi-factor authentication (MFA), configure single sign-on (SSO) via identity providers like Google or Salesforce, and manage verification methods such as recovery codes for emergency access. These capabilities ensure that only authorized users can access the cloud environment while maintaining flexibility for organizations with diverse identity systems.
With TCM, cloud administrators can also oversee site-level settings and user access policies across multiple sites, helping enforce consistent security and governance standards. By combining operational monitoring with secure user management, Tableau Cloud Manager empowers organizations to scale Tableau Cloud confidently while maintaining control and compliance.
Summary
Together, these features expand what’s possible with Tableau by combining flexibility, security, and automation. The Migration SDK streamlines the move to Tableau Cloud for large organizations. Tableau MCP and user attributes unlock smarter, more personalized analytics experiences. Private Connect strengthens data security by keeping AWS traffic private, and Tableau Cloud Manager ensures you can enforce MFA and consistent authentication policies. By adopting these capabilities, organizations can innovate faster, protect data, and deliver a seamless analytics experience for every user.