#Tableau Server67 人正在讨论

When looking at the data source tab of a report I don't own, that has an extract generated from Snowflake (using stored OAUTH credentials in the report owner's account), editing the connection, I see this:The owner of the report sees this:

I spent a while wondering how this report was successfully updating without any credentials. Now that I know, I'll probably just ignore it, but that means I can't diagnose if that's the reason a report is legitimately not updating, without asking the owner (who may not be available) to check for me. That dialog will look the same to me whether there are stored credentials or not. Am I overcomplicating it (cos' I'd get some other extract error if there was, say, a query problem, so this would be the catch-all)? 

Creating a new workbook with a datasource with connection to MS SQL using the Tableau server GUI works fine but when clicking the "Data Source" tab the page initially loads ok but then there is a delay followed by "Unexpected Error" 

The error message is: 

Session ID: 71705F88A636490B90F1B1EF0D85F7C4-1:1 

Uncaught Error: Minified React error #185; visit

for the full message or use the non-minified dev environment for full errors and additional helpful warnings. 

The additional information when following the link is: 

Upon opening the above URL, here is the message ---

I have restarted the browser, restarted tableau server, and started from scratch with a new workbook and datasource. 

We have many workbooks and datasources connecting to this sql server and they worked fine yesterday. 

All datasources to this MS SQL server are affected. 

Tableau Server Version: 2025.3.3 (20253.26.0206.0336) 64-bit Windows 

Hi Tableau Community,

I am looking for best practice guidance on configuring authentication between Tableau Server and an Oracle Database in an enterprise environment while strictly enforcing individual user permissions.

Current Environment & Workflow:

1. Current State: We currently use static database usernames/passwords for connection, but we want to migrate away from static credentials entirely.
2. Desktop Client: In Toad/Tableau Desktop, developers connect to Oracle via Integrated Authentication / Kerberos (AD Tickets). They run a local script to generate an Active Directory ticket and connect seamlessly without entering database passwords.
3. Tableau Server: Tableau Server is currently running under a default setup.

The Challenge:

If we use a single generic account (like the Server Run As account) to connect to Oracle, every developer and end-user on Tableau Server gains access to all tables through that single identity.

We do not want a shared service account with broad access. We need each user/developer on Tableau Server to access only the specific Oracle tables they are individually authorized to see in Active Directory / Oracle.

What We Want to Achieve:

• Pass-Through Authentication: Migrate from static database credentials to a ticket-based AD/Kerberos mechanism on Tableau Server.
• No Database Passwords: Avoid sharing or embedding static database passwords in workbooks or Server connections.
• User-Level Authorization: Ensure that when a workbook is viewed or published, the connection to Oracle honors the logged-in user's individual AD/Kerberos permissions (Viewer Credentials).

Questions:

1. Is Kerberos Constrained Delegation between Tableau Server and Oracle the recommended architecture to pass the logged-in user's AD identity directly to Oracle?
2. If Kerberos Delegation is configured, how are Extract Refreshes handled for user-specific data sources without static service passwords?
3. Are there alternative patterns (e.g., Oracle Proxy Authentication or Published Data Sources with RLS) to enforce table-level Oracle security while keeping the experience passwordless for users?

Any guidance, architectural best practices, or official configuration references would be greatly appreciated!

Thanks in advance. 

We do not have Admin access to our Tableau Server, but we have access to PostgreSQL DB workgroup schema. 

We have a need to monitor LDAP groups, users and Site Limits. 

We have created custom data model for the data (screenshot attached), but results do not match with details presented on Tableau Server (supporting group with Admin access is sharing latest Site Limits numbers) and some of the users do not have names displayed. 

Please let me know if our model is using proper objects. 

Is there any documentation for the workgroup schema tables how to connect them? 

We start with users: 

- id 

- site_id 

- site_role_id 

joined group_users via

= group_users.user_id for: 

- group_id 

joined groups via group_users.group_id =

for: 

- name (group name) 

joined hist_users via

= hist_users.user_id for: 

- name (user name) 

joined site_roles via users.site_role_id = site_roles.id for: 

- display_name (site role name) 

joined sites via users.site_id =

for:  

- name (site name) 

Viz 1 

Rows 

site_role_id, display_name, countdistinct (user_id) 

we have number of users for each site role. We can add here role_name, we can add user_name, but there are NULL values for user_name from hist_users.  Why there are NULL for user_name? Are they past users? Never logged in? 

Viz 2 

We would like to find number of Site Limits for each license type. 

In sites table there are three columns named 'Tier Basic User Capacity', 'Tier Author Capacity', 'Tier Interactor Capacity'. Are them the ones to preset set Site Limits? If no, where can I found proper numbers? 

Hello all, 

I have (Recently upgraded the servers to version 2026.2.1) Linux server and using tnsnames.ors files for Oracle DB connections. Also has the 'ojdbc11.jar' driver file placed at /opt/tableau/tableau_driver/jdbc location.  

(Note: Other data extracts or refreshes works normally. only issue with this recently created flow which outputs multiple files) 

I see one of the prep flows on the server is failing with ERROR: "

Output step error message: [FailedToConnectExternalResourceError] - Unable to connect to DataSource_Name on DataSource_Name. Check that the data source is available, or edit the connection and enter your credentials again

" 

When I check connection from the panel 'Test Connection' works and shows successful, but at the runtime this flow fails.  

I have tnsfiles.ora with proper DB connection names and have placed the 'oracle.properties' file with the string 'oracle.net.tns_admin=/etc' within at locations: 

1. /var/opt/tableau/tableau_server/data/tabsvc/flowminerva/Datasources/oracle.properties 

2./var/opt/tableau/tableau_server/data/tabsvc/minerva/Datasources/oracle.properties 

3./var/opt/tableau/tableau_server/data/tabsvc/vizqlserver/Datasources/oracle.properties  

also, just now added the file at - 

4. /var/opt/tableau/tableau_server/data/tabsvc/flowprocessor/Datasources/oracle.properties

Any idea what can I check for?  

Thank you! 

#Tableau Server  #Flow  #Tableau