CU Alert: All enterprise and business applications are available.
Portal Status: Green
Users can log in directly to the CU employee portal or through the Tableau Enterprise Server URL. Here's how:
Step 1: Connect to a campus network.
Users must connect to a campus network in order to access the Tableau Enterprise Server. That means physically being at a CU campus and plugged into the network with a cable, or connected to the password-protected wireless network (NOT the Guest network).
VPNs provide a secure connection to your campus network from any location, as long as your device has an internet connection. CU Denver and CU Anschutz also offer a virtual desktop option.
CU affiliates should log in to the CU Denver VPN and connect as normal to access CU content.
Step 2: Log in through the Portal by typing my.cu.edu into a browser, selecting your campus, and logging in using your VPN and AD credentials.
Step 3: In the center drop-down menu, select Reporting and Compliance.
Step 4: Click on the CU Visualizations portal tile.
To log in from your browser directly, go to viz.cu.edu in your browser, select your campus and log in using your VPN and AD credentials. If a user only has access to one site, the user may need to use a site-specific URL. See a full list in the section below.
Visit the Tableau SharePoint Access folder for the most recently updated version of How to Log In
If a user sees this error message when attempting to log in,
A good way to confirm #2, that the user has the correct credentials, is to have the user log in to the portal and access CU-Viz from the portal tile. If that fails, see if the user can access another application from the portal that requires VPN (any tile with a red VPN indicator).
If the user is logged in to the VPN and can access other VPN-required applications, work with your Site Administrator to confirm #3, that they already exist as a user.
For contact information for Tableau sales representatives, technical help or Tableau's customer success manager for CU, visit Tableau Sales Representatives on SharePoint. You will need to be on a CU VPN for access.
Contact your campus site administrator to purchase or renew a Tableau desktop license. UIS staff, see the UIS Tableau Purchase/Renewal Workflow.
Every user in Tableau Server has not only a license type but also a site role. The site role is in the middle of the capability hierarchy, as shown in the diagram.
The combination of a user's license type and site role determines the maximum capabilities that a user can exercise on a site. Even if a user is granted a capability—for example, permission to publish to a specific project—permissions will be denied without the right combination of license type and site role.
When you select the information icon for site role in the user interface, the corresponding tooltip lists the site roles in decreasing order of power: Creator, Explorer (can publish), Explorer, Viewer and Unlicensed. The tooltip also explains the access level for server administrators and site administrators. Use this tooltip as a guide when adding a user or changing a user's site role.
The Data and BI Team within University Information Services has Tableau Server Administrator capabilities.
The Server Administrator site role allows a user to manage Tableau Server. Examples of things a server administrator can manage include:
The Data and BI Team or an existing Site Administrator Explorer can assign the Site Administrator Explorer role to designated individuals for each site within Tableau Server Enterprise. These users can add other server users to their site.
Within the site, they can create groups to make the management of permissions easier at a project level. Site Administrator Explorers have full editing and saving rights to any dashboards on their sites and can publish content to the server.
A site administrator manages everything within a given site on Tableau Server. Examples of things site administrators can manage on their sites include:
Site administrators can't manage system-wide settings or site settings that are applied from the server administrator level. A user with this site role does not need permission to do these things. If permission is explicitly denied for something, this site role will override that denial. Exact capabilities depend on which license type (Creator or Explorer) the site role uses.
Site Administrator Creator – not the default, as it requires special licensing
Site Administrator Explorer – the default for a Site Administrator
Site Administrator Explorers (Site Owners) can assign users the Explorer (can publish) capability within sites in Tableau Enterprise Server. Users with an Explorer (can publish) license can publish new content to Tableau Server and can save and publish changes made to existing content.
An Explorer (can publish) site role provides users with publishing permissions within Tableau Server. The Explorer (can publish) site roles require an Explorer license. The Explorer license provides access to the server from the browser or Tableau Mobile.
Examples of the capabilities for the Explorer (can publish) site role include:
Use the web editing environment to:
An Explorer site role can browse and interact with published views on Tableau Server. The Explorer site role requires an Explorer license. Examples of Explorer site role capabilities include:
A Viewer site role has access to Tableau Server. Role capabilities include:
This type of user exists on the CU Tableau Enterprise server, but these users can’t log in or see data unless they are granted a site role and the proper permissions. Users were given the Unlicensed designation in the enterprise server if they were unlicensed in campus servers or have never been granted access to Tableau Server.
The Unlicensed site role does not allow the user to sign in to Tableau Server or Tableau Online. The Unlicensed site role does not have a license assigned to it. Users are assigned the Unlicensed role in the following circumstances:
|SITE ROLE||Admin Level||Publishing Capable||LICENSE TYPE|
This setting is valid only if you are importing users while managing the server (i.e. not signed into a specific site, and requires a Creator license.
|Site Admin Creator or Site Admin Explorer
This setting is only valid if you are importing users, while signed into a specific site.
|Site||True||Creator or Explorer
|Explorer (can publish)||None||True||Explorer|