> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tableau

> How DSALTA integrates with Tableau — data collected, setup guide, and automated compliance checks.

## Overview

DSALTA connects to Tableau using read-only API access to collect compliance evidence automatically. Data syncs every 24 hours and feeds into your Data Library modules.

<Info>
  **Read-only access.** DSALTA never modifies, creates, or deletes resources in your Tableau site.
</Info>

DSALTA authenticates with a Tableau **Personal Access Token (PAT)** and reads the users on your Tableau site — their username, full name, email, and site role. It uses this roster to run access-governance checks that compare Tableau access against your **People** page, matched by email.

## How to Connect

Tableau connects with a **Personal Access Token** — there's no app to install.

<Steps>
  <Step title="Enable Personal Access Tokens">
    A Tableau site or server admin must enable PATs. On **Tableau Cloud**, go to **Settings → General**; on **Tableau Server**, enable them via `tsm`. Skip this step if PATs are already enabled.
  </Step>

  <Step title="Create a Personal Access Token">
    In Tableau, open your profile, then **My Account Settings → Personal Access Tokens**. Enter a token name, click **Create Token**, and copy the secret — it is shown only once.
  </Step>

  <Step title="Find your HostName and API Version">
    Your **HostName** is the host in your Tableau URL with no protocol, e.g. `dub01.online.tableau.com`. Use a current REST API version, e.g. `3.26`.
  </Step>

  <Step title="Find your Content URL and connect">
    On **Tableau Cloud**, the **Content URL** is the value after `/site/` in your URL (e.g. `acme`); leave it blank for a default Tableau Server site. In the DSALTA sidebar, go to **Integrations**, find **Tableau**, and click **Connect**. In the secure window, paste the token name, token secret, HostName, API Version, and Content URL, then submit.
  </Step>

  <Step title="Finish">
    DSALTA runs an initial sync — usually a few minutes — after which the compliance checks below activate.
  </Step>
</Steps>

## Automated Compliance Checks

Each check below runs automatically every 24 hours. Click any check for step-by-step remediation guidance.

| Check                                                                                                                  | Description                                                                        |
| ---------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------- |
| [User access to Critical System should be valid](/integrations/tableau/user-access-to-critical-system-should-be-valid) | Checks that everyone with Tableau access is an active employee on the People page. |
| [Offboarded users should not have active access](/integrations/tableau/offboarded-users-should-not-have-active-access) | Checks that offboarded employees no longer have active Tableau access.             |

## Troubleshooting

<AccordionGroup>
  <Accordion title="Integration shows Disconnected">
    Re-authenticate from **Integrations → Tableau → Reconnect**. This usually happens when the Personal Access Token expires, is revoked, or goes idle (Tableau PATs expire after a period of inactivity). Create a fresh token and reconnect.
  </Accordion>

  <Accordion title="Data is not syncing">
    Confirm the Personal Access Token is still valid and that the HostName, API Version, and Content URL are correct for your site. Then trigger a manual sync from the integration settings.
  </Accordion>
</AccordionGroup>