• Cert++
  • Practice
  • Certle
  • Review
  • Tracks
  • Checklist
  • Guides
  • Upgrade
Cert++
  1. Home
  3. Tableau Server Administrator

Tableau Server Administrator

Checklist progress

0/268Learned

Tableau Server Administrator

Study Checklist

  • Platform Administrator
  • Platform App Builder
  • Platform Foundations
  • Platform Developer
  • Platform Administrator II
  • Agentforce Sales Consultant
  • Agentforce Service Consultant
  • Platform Data Architect
  • Platform Development Lifecycle and Deployment Architect
  • Platform Identity and Access Management Architect
  • Platform Integration Architect
  • Platform Sharing and Visibility Architect
  • Heroku Architect
  • B2C Solution Architect
  • Experience Cloud Consultant
  • Agentforce Field Service and Operations Consultant
  • Agentforce Nonprofit Consultant
  • Data 360 Consultant
  • Omnistudio Consultant
  • CRM Analytics and Einstein Discovery Consultant
  • Platform User Experience Designer
  • Platform Strategy Designer
  • B2C Commerce Developer
  • JavaScript Developer
  • Omnistudio Developer
  • Platform Developer II
  • Marketing Cloud Engagement Administrator
  • Marketing Cloud Engagement Specialist
  • Marketing Cloud Engagement Consultant
  • Agentforce Sales Foundations
  • Business Analyst
  • Marketing Cloud Engagement Developer
  • Marketing Cloud Engagement Foundations
  • Agentforce Specialist
  • Agentforce Life Sciences Consultant
  • B2B Commerce Administrator AP
  • B2B Commerce Developer AP
  • Agentforce Consumer Goods AP
  • Agentforce Financial Services AP
  • Agentforce Health AP
  • Agentforce Manufacturing AP
  • MuleSoft Integration Foundations
  • MuleSoft Developer
  • MuleSoft Developer II
  • MuleSoft Platform Integration Architect
  • MuleSoft Platform Architect
  • Tableau Desktop Foundations
  • Tableau Data Analyst
  • Tableau Consultant
  • Tableau Server Administrator
  • Tableau Architect

Checklist progress

0/268Learned

  • Identifying the key components of the Tableau Server web interface, including the top navigation bar, site selector, and content areas.
  • Which UI panel in Tableau Server allows a Server Administrator to view active background jobs and queue status.
  • Navigating to the Tableau Services Manager (TSM) web UI versus the Tableau Server web UI — which tasks belong to each interface.
  • A server admin needs to change a server-wide configuration setting such as the session timeout. Which tool or interface should they navigate to.
  • Identifying Tableau client components: Tableau Desktop, Tableau Reader, Tableau Mobile, and Tableau Prep Builder.
  • The purpose of each Tableau client component (Desktop, Reader, Mobile, and Prep Builder).
  • Which client component allows a user to view and interact with Tableau workbooks without a paid license.
  • Identifying Tableau Server components: the gateway, application server, VizQL server, data server, backgrounder, cache server, and repository.
  • The role of the repository (PostgreSQL) in Tableau Server and the types of data it stores.
  • Identifying which Tableau Server process handles rendering of views and queries to data sources.
  • The sequence of process interactions when a user opens a view in a browser: gateway, application server, VizQL server, and data server interactions.
  • Where an administrator finds the currently installed version of Tableau Server in the TSM web UI.
  • Which TSM command-line command returns the currently installed Tableau Server version.
  • The official location where Tableau Server installation packages and the latest releases are available for download.
  • How and where an administrator accesses Tableau Server release notes to review changes between versions.
  • The minimum CPU core count required to install Tableau Server.
  • The recommended CPU core count for a production Tableau Server deployment.
  • Minimum hard disk space requirements for a Tableau Server installation, including considerations for extracts and log storage.
  • A company plans to host large extract files on Tableau Server. What hard disk sizing considerations must the administrator account for beyond the OS installation footprint.
  • Which operating systems are supported for installing Tableau Server (Windows Server versions, Linux distributions).
  • The configuration prerequisites for enabling email alerts on Tableau Server, including SMTP relay setup.
  • Why antivirus real-time scanning can interfere with Tableau Server operations.
  • Which Tableau Server directories and processes should be excluded from antivirus real-time scanning.
  • Where and how an SMTP server is configured in Tableau Server for sending subscription and alert emails.
  • Default ports used by Tableau Server and what must be opened in a firewall for basic server operation.
  • An administrator reports that users can reach the Tableau Server login page but extract refreshes are failing. Which port conflict is the likely cause.
  • Why Tableau Server should be installed on a dedicated machine rather than sharing resources with other enterprise applications.
  • Key architectural considerations when deploying Tableau Server on cloud infrastructure (AWS, Azure, GCP) versus on-premises.
  • Key licensing considerations when deploying Tableau Server on cloud infrastructure versus on-premises.
  • A company is deploying Tableau Server on AWS EC2. Which instance-level considerations affect performance, such as instance type, EBS vs. instance storage, and network bandwidth.
  • The difference between Tableau Server user-based licensing and core-based licensing.
  • When an organization should choose user-based licensing versus core-based licensing for Tableau Server.
  • What core-based licensing grants in Tableau Server in terms of unlimited named users.
  • How core-based licensing is activated on Tableau Server via product key.
  • The typical deployment scenario where core-based licensing is chosen over user-based licensing.
  • What a Guest user is in Tableau Server: an unlicensed user who can view embedded views without signing in.
  • The site-level setting that must be enabled to permit Guest user access on Tableau Server.
  • Which Tableau Server licensing model is required to support Guest user access.
  • The distinctions between Creator, Explorer, and Viewer license types in Tableau Server, including what each license permits.
  • Which Tableau license type grants the ability to publish content and connect to any data source from the web.
  • How Creator, Explorer, and Viewer licenses constrain the maximum site role a user can be assigned in Tableau Server.
  • A business analyst needs to publish workbooks but not create new data connections. Which license type and site role combination is the minimum required.
  • The role of the Application Server (VizPortal) process in Tableau Server: handling web UI rendering, REST API requests, search, and user authentication interactions.
  • The role of the VizQL Server process: what it renders, what it queries, and how it caches results.
  • The role of the Data Server process: how it manages connections, passes queries, and supports published data sources.
  • The role of the Data Engine (Hyper) process in Tableau Server: how it stores, indexes, and queries .hyper extract files to serve fast in-memory analytical queries.
  • The role of the Cluster Controller process: monitoring the health of Tableau Server processes across all nodes and coordinating automatic failover when a process or node becomes unavailable.
  • The role of the Coordination Service (based on Apache ZooKeeper) in a Tableau Server multi-node deployment: maintaining distributed consensus on configuration state and enabling leader election for failover.
  • The role of the Backgrounder process in Tableau Server and the types of tasks it is responsible for executing.
  • The role of the Cache Server (Redis) in Tableau Server and what types of data it caches.
  • The role of the File Store process in Tableau Server: replicating .hyper extract files across data nodes in a distributed cluster to ensure extract availability on any node.
  • The role of TSM (Tableau Services Manager) and how it differs from the Tableau Server administration interface.
  • Which Tableau Server processes support multiple instances, and why running multiple instances improves throughput or availability.
  • The process-to-process workflow when a user requests a view that requires a live database query: gateway → app server → VizQL → data server → database.
  • A company needs Tableau Server to remain operational if any single node fails. Which repository configuration is required.
  • Why the Coordination Service requires an odd number of instances (3 or 5) for quorum in a high-availability Tableau Server deployment.
  • Which processes must be distributed across multiple nodes to achieve high availability in a Tableau Server cluster.
  • The role of a load balancer in a multi-node Tableau Server deployment and which Tableau process it distributes requests to.
  • The default gateway ports for Tableau Server (port 80 and 443) and when they must be opened in a firewall.
  • The internal ports used by Tableau Server processes such as the repository and cache server.
  • The performance, freshness, and security trade-offs between extract-based connections and live database connections on Tableau Server.
  • A user reports that their dashboard always shows yesterday's data even after clicking Refresh. The dashboard uses a published extract. What is the correct administrative action.
  • The benefits of publishing a data source to Tableau Server versus embedding connection credentials in individual workbooks.
  • How a published data source enables centralized credential management for multiple workbooks on Tableau Server.
  • How a published data source enables row-level security for multiple workbooks on Tableau Server.
  • How high network latency between Tableau Server and the underlying database affects live connection performance versus extract performance.
  • Why Dynamic IP addressing for the Tableau Server machine creates connectivity and licensing risks.
  • The recommended mitigation for Dynamic IP addressing on a Tableau Server machine.
  • The minimum RAM requirement for a single-node Tableau Server installation.
  • The recommended RAM for a single-node Tableau Server installation in production.
  • The default number of VizQL Server, Backgrounder, and Data Server processes configured during a standard single-node installation.
  • Distinguishing between file-based data sources (Excel, CSV), relational databases (SQL Server, PostgreSQL), and cube/OLAP data sources (SSAS) in Tableau Server context.
  • How Web Data Connectors (WDC) retrieve data from web services and APIs via JavaScript in Tableau.
  • Administrator considerations for permitting or blocking Web Data Connectors on Tableau Server.
  • Minimum network bandwidth and latency requirements between nodes in a multi-node Tableau Server deployment.
  • Why low-latency inter-node communication is critical for distributed Tableau Server process coordination.
  • Why database drivers must be installed on the Tableau Server machine and which process relies on them for live connections and extract refreshes.

2.1.1 Understand installation steps and options

0/1

  • The high-level sequence of steps for installing Tableau Server: downloading the installer, running setup, activating the license, and initializing TSM.

2.1.2 Understand Identity Store and SSO options

0/1

  • The two identity store options available during Tableau Server installation: Active Directory (external) and Local Authentication.

2.1.2.1 External (Active Directory) vs. local

0/2

  • The key operational difference between Active Directory identity store and local identity store in Tableau Server, including password management implications.
  • A company's IT policy requires that all application passwords be managed centrally in Active Directory. Which identity store option should the Tableau Server administrator select during installation.

2.1.2.2 Trusted Tickets

0/3

  • How Trusted Tickets enable single sign-on for Tableau Server by allowing a trusted web server to request a ticket and embed a view without re-authentication.
  • How trusted IP addresses and the wgserver.trusted_hosts setting configure Trusted Ticket authentication on Tableau Server.
  • The Trusted Ticket redemption flow: how a trusted web server requests a ticket and embeds a view without re-authentication.

2.1.2.3 SAML

0/2

  • How SAML authentication works in Tableau Server: the role of the identity provider (IdP), service provider metadata, and assertion consumer service URL.
  • A company uses Okta as its identity provider and wants all Tableau Server logins to be authenticated through Okta. Which SSO method should the administrator configure.

2.1.2.4 Kerberos and OpenID Connect

0/2

  • How Kerberos authentication enables transparent single sign-on in a Windows Active Directory environment for Tableau Server users.
  • The use case for OpenID Connect (OIDC) in Tableau Server and how it differs from SAML as an SSO mechanism.

2.1.3 Describe the impact of the automatic-login options

0/1

  • The impact of enabling Automatic Login (auto-login) for Active Directory users: what happens when a user accesses Tableau Server from an AD-joined machine.

2.1.4 Understand how to set up SSL

0/3

  • The steps required to configure SSL on Tableau Server: obtaining a certificate, placing the certificate files in the correct directory, and applying the configuration via TSM.
  • The difference between external SSL (encrypting browser-to-server HTTPS traffic) and internal SSL (mutual SSL for encrypting inter-process communication within Tableau Server), and when each should be enabled.
  • An administrator wants to encrypt all communication between users' browsers and Tableau Server. What type of SSL certificate and which TSM commands are required.

2.1.5 Understand Tableau best practices for installing a single-machine environment

0/5

  • Best practices for a single-machine Tableau Server installation: dedicated hardware and OS configuration.
  • Best practices for a single-machine Tableau Server installation: antivirus exclusions and service account requirements.
  • The minimum Windows permissions required for the Tableau Server Run-As service account.
  • How the Tableau Server Run-As service account is configured during installation.
  • The impact on Tableau Server services when the Run-As service account password expires.

2.1.6 Understand silent installs

0/1

  • How to perform a silent (unattended) installation of Tableau Server using the installer's command-line flags and a response file.

2.2.1 Understand cache settings

0/3

  • How to enable file-level encryption for .hyper extract files stored on disk in Tableau Server.
  • What security threat extract encryption at rest mitigates on Tableau Server.
  • The performance trade-off of extract encryption at rest compared to unencrypted storage on Tableau Server.

2.2.2.2 Configure Email alerts / subscriptions

0/1

  • The prerequisites for enabling email subscriptions on Tableau Server: SMTP configuration, sender address, and site-level subscription settings.

2.2.2.3 Configure optional customizations

0/1

  • Optional server customizations available to a Tableau Server administrator: custom branding, welcome banners, and custom sign-in messages.

2.2.3.4 How to enable and edit site subscriptions

0/1

  • The steps to enable email subscriptions at the site level and how to configure the allowed schedule options for subscribers.

2.2.3.5 Project configuration options

0/2

  • Configuring project description and project owner settings in Tableau Server.
  • How default project-level permissions cascade to workbooks and data sources published into a Tableau Server project.

2.2.3.6 Group and User Configuration options

0/1

  • How groups in Tableau Server simplify permission management and how user membership in a group affects that user's effective permissions.

2.2.4 Understand who can add users

0/1

  • Which roles (Server Administrator, Site Administrator) can add users to Tableau Server and how the capability is scoped per site.

2.3.1 License type and site role

0/1

  • Mapping Creator, Explorer, and Viewer license types to their maximum permitted site roles in Tableau Server.

2.3.2 Admin level

0/2

  • The distinction between Server Administrator and Site Administrator in Tableau Server: scope of access and what each can configure.
  • A user needs to manage users and projects on a single Tableau Server site without access to server-wide settings. Which admin level should they be assigned.

2.3.3 Publisher level

0/1

  • What the Publisher site role permits in Tableau Server compared to the Explorer (Can Publish) role and the Creator role.

2.3.4 Importing via Active Directory or Local

0/6

  • How to import users from Active Directory into Tableau Server using the TSM command line or the admin UI.
  • Which user attributes are synchronized when importing users from Active Directory into Tableau Server.
  • An administrator needs to provision 200 users at once from a CSV file. Which method should be used and what CSV format is required.
  • How to configure scheduled Active Directory group synchronization in Tableau Server.
  • Which user attributes are pulled during Active Directory group synchronization in Tableau Server.
  • How Active Directory group membership changes propagate to Tableau site roles during group sync.

2.4.1.2 Project level

0/1

  • How project-level permissions in Tableau Server serve as templates for workbooks and data sources published into that project.

2.4.1.3 Group level

0/1

How group-level permissions interact with user-level permissions in Tableau Server when a user belongs to multiple groups.

Learn this concept
Unseen

2.4.1.4 User level

0/1

  • How user-level permissions in Tableau Server override or are overridden by group-level permissions for the same content.

2.4.1.5 Data source level

0/4

  • How permissions set on a published data source in Tableau Server control which users can connect to, download, or overwrite that data source.
  • Implementing row-level security in Tableau Server using the USERNAME() calculated field as a user filter in a published data source, so each authenticated user sees only their authorized rows.
  • The trade-offs between row-level security implemented via Tableau user filters in a published data source versus row-level security enforced at the database or data warehouse level.
  • Implementing row-level security using an entitlement table: joining a separate permissions lookup table to the main data table in a published data source so each user automatically sees only authorized rows based on their username.

2.4.1.6 Workbook level

0/1

  • The permission capabilities that can be configured at the workbook level in Tableau Server, including View, Download, Filter, and Web Edit.

2.5.1.2 The ramifications of permission design

0/2

  • How locking a project's permissions in Tableau Server prevents project members from altering individual content permissions.
  • A Site Administrator has locked permissions on a project, but a content owner is complaining that they cannot change who can view their workbook. Why is this happening and what are the trade-offs.

2.5.1.3 The Tableau Security Model

0/1

  • The layered Tableau Server security model: server → site → project → content → row-level security, and how each layer's permissions compose.

2.5.2 Describe the differences between Allow v. Deny v. None

0/2

  • The three permission states in Tableau Server — Allow, Deny, None — and how they interact when a user has permissions set at both the group and user level.
  • A user is a member of Group A (View = Allow) and Group B (View = Deny). What is the user's effective View permission on a workbook where no user-level override is set.

2.1.1.1 Install Path

0/4

  • The purpose of the Tableau Server data directory: where extract files (.hyper), log files, and temporary files are stored.
  • Why placing the Tableau Server data directory on a high-throughput separate disk is a best practice.
  • How to specify a non-default data directory during Tableau Server installation.
  • The default installation path for Tableau Server on Windows and how changing it affects the upgrade process.

2.1.1.2 Gateway port

0/1

  • The default gateway port for Tableau Server and when an administrator would need to change it during or after installation.

2.1.2.5 Personal Access Tokens

0/4

  • What Personal Access Tokens (PATs) are and how they provide long-lived authentication for REST API and tabcmd automation without embedding a username and password.
  • How a Tableau Server administrator views and revokes Personal Access Tokens.
  • Why a DevOps pipeline calling the Tableau REST API should authenticate with a Personal Access Token instead of a username and password.
  • Where Personal Access Tokens are generated in Tableau Server.

2.2.2.1 Apply process distribution

0/2

  • How an administrator redistributes Tableau Server processes (e.g., adding a second Backgrounder instance) to improve throughput for extract refreshes.
  • The TSM interface location where process distribution is managed and the effect of adding additional VizQL server instances.

2.2.3.1 Site configuration options

0/2

  • The site-level guest access and web authoring settings an administrator can configure in Tableau Server.
  • How data source certification is configured at the site level in Tableau Server.

2.2.3.2 User quotas

0/1

  • How user quotas are configured at the site level in Tableau Server and what happens when the maximum number of users is reached.

2.2.3.3 Storage quota

0/1

  • How storage quotas limit the total size of published content on a Tableau Server site and what happens when the quota is exceeded.

2.4.1.1 Site level

0/1

  • Security controls at the Tableau Server site level: guest access, session timeout, and which roles can create and manage sites.

2.5.1.1 System permission composition

0/1

  • How Tableau Server resolves effective permissions when a user belongs to multiple groups with conflicting permission settings on the same content.

2.2.3.7 Revision history

0/1

  • How to configure the maximum number of workbook and data source revisions Tableau Server retains per content item, and the storage implications of increasing this limit.
  • An employee has left the company. Their Tableau Server account must be disabled but their workbooks must be retained. What is the correct action.
  • The difference between removing a user and deactivating a user in Tableau Server, including what happens to their published content.
  • How to edit the credentials for a published data source on Tableau Server, including the difference between embedded credentials and prompted credentials.
  • A database password was rotated and all extract refreshes are now failing. Where in Tableau Server does the administrator update the stored credentials.
  • The difference between extract refresh schedules and subscription schedules in Tableau Server, and which process (backgrounder) executes them.
  • When a full extract refresh versus an incremental extract refresh is appropriate on Tableau Server.
  • What configuration in a data source (an incremental refresh key column) must be defined before incremental refresh can be scheduled on Tableau Server.
  • How to create extract refresh schedules in Tableau Server, including frequency options and priority settings.
  • How to create subscription schedules in Tableau Server, including frequency options and priority settings.
  • A large extract refresh runs for several hours and impacts server resources. The source data only ever appends new rows. Which extract refresh strategy should the administrator configure to reduce runtime, and what is the prerequisite in the data source definition.
  • Linked Tasks in Tableau Server: how to chain multiple extract refreshes or Prep flow runs so that one task triggers the next upon successful completion, and the administrative interface used to configure them.
  • How a Tableau Server administrator creates or edits a subscription on behalf of another user, and what content types support subscriptions.
  • The built-in administrative views available in Tableau Server for analyzing server activity, extract refresh performance, and user traffic.
  • How an administrator uses the built-in 'Stats for Space Usage' view to identify large extracts that are consuming excessive server storage.
  • The TSM command used to create a Tableau Server backup (.tsbak file) and what data is included: repository, extract files, and configuration.
  • The process for restoring Tableau Server from a .tsbak backup file using TSM commands, including requirements for matching versions.
  • A server's disk has failed and a .tsbak backup exists. The administrator is restoring to a new machine running the same Tableau Server version. What are the required TSM commands and steps.
  • The purpose of the 'tsm maintenance cleanup' command and what files and artifacts it removes from a Tableau Server installation.
  • How Tableau Server's log file growth can impact disk space, and how to safely rotate and purge old log files.
  • How to update a Tableau Server product key using TSM when adding new user licenses or renewing maintenance.
  • The TSM CLI commands used to start, stop, and restart Tableau Server and when a full restart is required versus a configuration-only apply.
  • An administrator has changed a TSM configuration setting. Which command applies the pending changes and whether a server restart is required.
  • The difference between tsm and tabcmd: which tool manages server processes and configuration versus which tool performs content and user operations.
  • Using tabcmd to export a view as a PDF or image from the command line for automated report distribution.
  • The Tableau Server REST API authentication flow: signing in to get an authentication token and including it in subsequent API requests.
  • Common Tableau Server REST API use cases: publishing workbooks, querying users, triggering extract refreshes, and managing permissions programmatically.
  • What Webhooks in Tableau Server do: event-triggered HTTP callbacks that notify external systems when specific Tableau events occur.
  • The administrator steps to register a webhook in Tableau Server.
  • A developer wants to trigger an extract refresh as part of an ETL pipeline completion event. Which Tableau Server REST API endpoint should they call.
  • The types of Tableau Server log files (vizqlserver, backgrounder, gateway, tabadmin) and what each records.
  • How to use the 'tsm maintenance ziplogs' command to package server logs for support submission.
  • An administrator needs to diagnose why an extract refresh failed yesterday evening. Which log file and directory should they examine first.
  • The methods available for embedding Tableau Server views in external web pages: JavaScript API, iframes, and Trusted Tickets.
  • The server-side configuration changes required to allow Tableau Server views to be embedded in a third-party website (clickjack protection and allowlist settings).
  • A company wants users to see Tableau dashboards inside a CRM application without being prompted to log in. Which embedding approach with which authentication method achieves this.
  • How Tableau Server tracks Tableau Desktop license usage when users activate Desktop against the server, and how an administrator views license activity.
  • How revision history works in Tableau Server: how many versions are retained by default and how an administrator or content owner reverts to a previous version.
  • An analyst accidentally overwrote a production workbook. How does the administrator restore the previous version from revision history.
  • The different methods for viewing Tableau Server status: the TSM web UI Status page, TSM CLI 'tsm status', and the Tableau Server admin UI.
  • How Tableau Server sends email alerts for server events such as failed extract refreshes and subscription failures, and where alert settings are configured.
  • The difference between data-driven alerts and subscriptions in Tableau Server: when each fires and who can create them.
  • How data-driven alerts in Tableau Server work: conditions that trigger alerts, how they are created by users, and the server processes that evaluate them.
  • The categories of built-in administrative views in Tableau Server (Traffic to Views, Background Tasks, Stats for Space Usage, etc.) and their primary use cases.
  • How an administrator creates a custom administrative view by connecting Tableau Desktop to the Tableau Server repository (PostgreSQL) read-only user.
  • An administrator wants to build a dashboard showing the number of unique users per workbook over the past 90 days. What data source and connection method should be used.
  • How to enable and create a performance recording for a Tableau Server view, and what metrics it captures (query execution, rendering, data retrieval).
  • A dashboard is loading slowly for all users. An administrator enables a performance recording. What information in the recording indicates whether the bottleneck is the database query or the VizQL rendering.
  • How nested projects (child projects) work in Tableau Server: permission inheritance from parent projects and how locking affects nested content.
  • An organization wants to organize content by department and then by team within each department. Which Tableau Server content organization feature supports this hierarchy.
  • The purpose of sites in Tableau Server: content isolation, separate user bases, and separate storage/user quotas per site.
  • The Site Administrator Creator versus Site Administrator Explorer distinction and what each can manage on a site.
  • A company has two business units with separate governance requirements and should not see each other's content. How should the Tableau Server deployment be organized.
  • The site-level setting that must be enabled to configure Guest user access on Tableau Server.
  • Which license model permits Guest user access on Tableau Server.
  • The content exposure implications of enabling Guest user access for unauthenticated users on Tableau Server.
  • The steps to publish a workbook from Tableau Desktop to Tableau Server, including selecting a project, setting permissions, and choosing extract vs. live connection.
  • The difference between publishing a workbook with an embedded data source versus publishing the data source separately before publishing the workbook.
  • The interactive capabilities available to a Viewer-level user when accessing a view through the Tableau Server web browser interface.
  • What web authoring in Tableau Server allows users to do: edit existing workbooks and create new workbooks directly in the browser without Tableau Desktop.
  • Which site role and license type grants a user the ability to edit and save workbooks using Tableau Server's web authoring interface.
  • The methods for sharing a Tableau Server view: sharing the URL, embedding, and sending a subscription.
  • The access controls governing each method of sharing a Tableau Server view.
  • What data source certification in Tableau Server signifies, who can certify a data source, and how it surfaces in content search results.
  • An organization wants to promote trusted, governed data sources so users default to them over uncertified ones. How does the Data Source Certification feature enable this governance.
  • An extract refresh completes successfully, but users report the dashboard data has not updated. Which cache setting is most likely the cause and how should it be adjusted.
  • The purpose of the Tableau Content Migration Tool for copying or moving workbooks and data sources between sites or deployments.
  • Which types of content the Tableau Content Migration Tool supports migrating.
  • The permission requirements needed to use the Tableau Content Migration Tool.
  • A company uses a development site and a production site on the same Tableau Server. After testing a workbook on the development site, they want to promote it to production. Which tool supports this workflow and what does the migration plan include.
  • What Tableau Bridge is: a client-side agent installed behind a corporate firewall that allows Tableau Cloud or other cloud deployments to reach private on-premises data sources for live connections and scheduled extract refreshes.
  • An organization's Tableau deployment needs to refresh extracts from an on-premises SQL Server that is not accessible from the internet. Which Tableau component solves this connectivity problem.
  • What Tableau Catalog tracks as part of the Data Management Add-on: data lineage, external asset inventory, and field-level impact analysis.
  • How an administrator enables Tableau Catalog on Tableau Server.
  • The user-facing features Tableau Catalog unlocks on Tableau Server.
  • How Tableau Prep Conductor enables scheduling, monitoring, and alerting for Tableau Prep flows published to Tableau Server.
  • How Tableau Prep Conductor interacts with the Backgrounder process when running scheduled Prep flows.
  • An analyst has published a Tableau Prep flow to Tableau Server but cannot find any option to schedule it to run automatically. Which Tableau Server add-on license is required and which feature unlocks flow scheduling.
  • What Virtual Connections are in Tableau Server: a Data Management feature that creates a centralized, reusable connection layer (including row-level security policies) that multiple workbooks can reference without re-embedding connection details.
  • How a Tableau Server administrator resets a local user's password from the admin UI or via tabcmd.
  • The Tableau Run-As Service account and why its Windows password expiry can cause Tableau Server service failures, and how to update it.
  • The 'tsm maintenance ziplogs' command: what it packages, the output location, and how to include specific log date ranges.
  • Tableau Support has requested server logs to diagnose a recurring crash. Which TSM command packages the logs and what should the administrator include to help Support triage quickly.
  • How 'tsm maintenance validate-resources' identifies broken data source connections and missing files within a site.
  • When and how to rebuild the Tableau Server search index using 'tsm maintenance reindex-search', and what symptoms indicate a corrupted index.
  • Users report that published workbooks do not appear in Tableau Server search results even though they are accessible by direct URL. What is the likely cause and resolution.
  • The types of maintenance analysis reports available in Tableau Server's admin views and how they help identify performance bottlenecks.
  • An administrator notices the backgrounder queue is consistently long. Which maintenance analysis report provides visibility into queued and running background tasks.
  • Common causes of Tableau Server Active Directory authentication failures: incorrect NetBIOS domain name and DNS resolution issues between the server and the domain controller.
  • How to verify Active Directory connectivity for Tableau Server using TSM diagnostics or tabcmd.
  • Common SAML misconfiguration causes in Tableau Server: clock skew between server and IdP, incorrect assertion consumer service URL, and certificate mismatch.
  • Users report they are repeatedly prompted to log in even after a successful authentication. Which Tableau Server configuration settings (session timeout, cookie domain, or trusted authentication host list) are most likely responsible.
  • Symptoms and resolution steps when a Tableau Server SSL certificate has expired.
  • Symptoms and resolution steps when a Tableau Server SSL certificate has an incomplete chain (missing intermediate certificates).
  • How to replace SSL certificate files and re-apply the SSL configuration via TSM on Tableau Server.
  • Users see a browser security warning when accessing Tableau Server. The administrator confirms SSL is configured. What are the most likely certificate-related causes and how is each resolved using TSM commands.
  • How a missing or incompatible database driver manifests in Tableau Server — appearing as extract refresh errors or live connection failures — and the steps to identify which driver is needed and install it on the Tableau Server machine.
  • The grace period behavior when a Tableau Server license expires.
  • Which Tableau Server functions are restricted first when a license expires.
  • How users are affected when a Tableau Server license expires.
  • The TSM commands used to renew or reactivate a Tableau Server product key.
  • How disk space exhaustion on the Tableau Server data directory manifests — failed extract refreshes, backgrounder crashes, and service failures — and the immediate remediation steps including log cleanup, extract pruning, and quota adjustments.
  • The high-level steps for upgrading Tableau Server to a newer version: backing up the server, downloading the installer, running the upgrade, and validating post-upgrade.
  • Which Tableau Server components and data are preserved during an in-place upgrade and which must be manually re-applied.
  • A company is upgrading Tableau Server from version 2021.x to the latest version. Which prerequisite steps must be completed before running the upgrade installer.
  • Which node must be upgraded first in a multi-node Tableau Server cluster upgrade (the initial/primary node).
  • Why all nodes in a Tableau Server cluster must reach the same version before services restart during an upgrade.
  • How TSM coordinates the upgrade process across nodes in a multi-node Tableau Server deployment.
  • Post-upgrade validation: verifying Tableau Server process health via 'tsm status' and confirming background tasks resume normally.
  • Post-upgrade validation: checking that extract refresh schedules and subscriptions continue to work after a Tableau Server upgrade.
  • Post-upgrade validation: confirming that user authentication continues to work after a Tableau Server upgrade.
  • When a clean reinstall is preferred over an in-place upgrade in Tableau Server and the steps involved in removing the existing installation first.
  • A heavily customized Tableau Server installation is exhibiting persistent instability after an upgrade attempt. The decision is made to perform a clean reinstall. What data must be backed up and restored to preserve user content and settings.
  • The process for migrating Tableau Server to new hardware: backup on old server, install on new server, and restore — including matching version requirements.
  • An organization is decommissioning its on-premises server and moving Tableau Server to a new virtual machine. What is the safest migration sequence to minimize downtime.
  • How Tableau Server handles backwards compatibility with older versions of Tableau Desktop: which version combinations are supported for publishing workbooks.
  • A user upgraded Tableau Desktop but the server is running an older version. What publishing limitations might the user encounter.
  • Whether an automatic rollback exists when a Tableau Server upgrade fails mid-process.
  • The role of the pre-upgrade backup in restoring the previous Tableau Server version after a failed upgrade.
  • The limitations on rollback after certain Tableau Server upgrade stages have completed.

Prepare for the Exam

Play Today's Certle
Back to track

Study Community

Ask questions and get the latest info from other Tableau Server Administrator studiers. 593 members and growing.

Go to Discord

How group-level permissions interact with user-level permissions in Tableau Server when a user belongs to multiple groups.

Explainer

Learn More

Practice Question

Keep going

Next conceptHow user-level permissions in Tableau Server override or are overridden by group-level permissions for the same content.

Checklist progress

0/268 (0%)

0 of 268 concepts learned

Tip: You can filter concepts by status.

Prepare for the Exam

Play Today's Certle
Back to track

Study Community

Ask questions and get the latest info from other Tableau Server Administrator studiers. 593 members and growing.

Go to Discord

Explainer

Tableau Server determines access by evaluating permission rules in a strict order, prioritizing user-level settings over group-level settings. When a user belongs to multiple groups, the system applies a restrictive logic where any explicit denial from a single group overrides allowances from other groups. Access is only granted when a capability is explicitly allowed and never denied across all applicable rules.

Core information
  • Tableau evaluates permissions in a fixed sequence, checking specific user rules before evaluating any group-level rules.
More details and nuances
  • A denial from any single group will override an allowance from another group the user belongs to, because Tableau permissions follow a restrictive default model.