Lesson 2: Tableau CRM Administration Basics 📊 📈 📉

Sunil Bhardwaj
5 min readNov 26, 2021

--

1.Give Users Permission to Use Tableau CRM

After you purchase a Tableau CRM license, you can follow either the quick or custom process for assigning permissions. The quick process lets you assign a default permission set to users. It lets you get the job done quickly, but gives you less control.

The custom process takes more work but gives you fine-grained control over the permissions you assign. It involves these steps:

  1. Assign Tableau CRM permission set licenses to your users.
  2. Create a permission set that contains all the permissions your user needs, then assign the permission set to the user.

Permission Set Licenses versus Permission Sets

If you follow the custom process, you first assign a permission set license to users. The PSL enables a set of user permissions in your org, but doesn’t assign them without you doing something first.

That “something” is to create a permission set. Select the permissions you want to assign from the specific permissions enabled by the PSL, and add them to the permission set. You then assign that permission set to users.

User Permissions Enabled by a Tableau CRM Permission Set License

  • Create and Edit Tableau CRM Dashboards
  • Create Tableau CRM Apps
  • Edit Tableau CRM Dataflows
  • Manage Tableau CRM
  • Upload External Data to Tableau CRM
  • Use Tableau CRM

2. Select and Enable Tableau CRM Features

Show or Hide Data in Thumbnails

The icons representing your lenses and dashboards can show previews of the underlying data. On the one hand, it makes it easier for users to find their lenses and dashboards on the home page and on app pages. On the other hand, it has the potential to show sensitive information.

As admin, you can set whether those icons show data or not. You can replace the generic icons with preview thumbnails of the contents of all lenses and dashboards.

Preview thumbnails appear by default, unless special access restrictions, or a “security predicate”, is defined for a dataset. If you enable this setting, even assets with security predicates show a preview thumbnail.

Enable Tableau CRM for Experience Cloud

When using your own org with Experience Cloud already set up, you would assign your site members the Analytics for Experience Cloud permission set license, and then create a permission set that includes the View Analytics on Experience Cloud pages permission and assign it to your site members.

Enable or Disable Downloading from Tableau CRM

Users can download the results from lens explorations and dashboard widgets as images (.png), MicrosoftÂŽ ExcelÂŽ (.xls), or comma-separated values (.csv) files.

Assign users a permission set that includes Download Analytics Data. Users with the permission see download options when they select Download from a dashboard widget.

Enable Annotations on Dashboard Widgets

Annotation lets users have conversations right in the dashboard. They can add notes to dashboard widgets, with comments posted in the dashboard, and in Chatter. With annotations, your users can hold more efficient conversations about data and how it’s visualized because the dashboard is right there for reference. Tableau CRM dashboard annotations are natively integrated with Chatter, so users are automatically notified when they receive comments. Click in Chatter and go straight to the dashboard in Tableau CRM.

  1. From Setup, enter Feed Tracking in the Quick Find box, then select Feed Tracking.
  2. Select Analytics Asset.
  3. Select Enable Feed Tracking.
  4. Click Save.

Note: Annotations are supported only in dashboards built with the Tableau CRM dashboard designer.

Enable the Analytics REST API

You can access Analytics features such as datasets, dashboards and lenses programmatically using the Analytics REST API.

  1. From Setup, enter Analytics in the Quick Find box, then select Settings.
  2. Select Grant all users access to Wave API.
  3. Click Save.

3.Control Access and Secure Your Data

Salesforce Data Access in Tableau CRM

Tableau CRM accesses Salesforce data based on permissions of two internal Tableau CRM users: Integration User and Security User.

  • Tableau CRM uses the permissions of the Integration User to extract data from Salesforce objects and fields when a dataflow job runs.
  • When you query a dataset that has row-level security based on the User object, Tableau CRM uses the permissions of the Security User to access the User object and its fields.

Note: ‘Analytics Cloud Integration User’ and ‘Analytics Cloud Security User’ profiles are often cloned for customized use when you enable Tableau CRM in your org. You or another admin probably did this during enablement.

Row-Level Security

The purpose of implementing row-level security on a dataset is to restrict access to certain records to Tableau CRM users because some records contain sensitive data that shouldn’t be accessible to everyone.

Security Predicates

A predicate is a filter condition that defines row-level access to records in a dataset. When a user submits a query against a dataset that has a predicate, Tableau CRM checks the predicate to determine which records the user can access. If the user doesn’t have access to a record, Tableau CRM simply doesn’t return it.

Example of a Predicate to restrict user access to specific records: “rowLevelSecurityFilter”:”’AccountOwner’ == \”$User.Name\””

AccountOwner refers to the dataset field that stores the full name of the account owner for each sales target. $User.Name refers to the Name column of the User object that stores the full name of each user. Tableau CRM performs a lookup to see who’s currently logged in.

This predicate returns a match when the names in AccountOwner and $User.Name are the same. The user only sees data for which he or she is the account owner.

Field-Level Security

Even though you don’t configure field-level security in Tableau CRM, remember that Tableau CRM dataflows run using Analytics Integration User permissions. So, if you enforce field-level security on Salesforce objects, you have to assign read access to the Analytics Integration User. If you don’t, you sometimes see errors when your dataflow runs, since Tableau CRM can’t see that data.

4.Tableau CRM Apps

Tableau CRM apps tell easy-to-follow stories through interactive, ready-made dashboards that give you a visual summary of your Salesforce data.

The Sales Analytics app uses data from Sales Cloud to tell your company’s sales story. Service Analytics does the same with your Service Cloud data. And Event Monitoring Analytics pulls data from Salesforce event logs.

Happy Learning! ✍️

Please follow me at Twitter : https://www.twitter.com/sunilbhardwaj1

LinkedIn : https://www.linkedin.com/in/sunilbhardwaj10

--

--

Sunil Bhardwaj
Sunil Bhardwaj

Written by Sunil Bhardwaj

I'm Salesforce CRM Analytics Ambassador (2023 & 2022). I'm working with HCL as Salesforce Lead Consultant. I always enjoy helping people & being a Trailblazer!

No responses yet