> ## Documentation Index
> Fetch the complete documentation index at: https://docs.opal.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Salesforce Tableau

> Learn how to connect your Opal instance with Tableau.

Opal's integration with Tableau allows you to manage access to Tableau groups.

## Supported resources

| Resource       | Read | Grant and revoke access |
| -------------- | ---- | ----------------------- |
| Tableau users  | ✔️   | ✔️                      |
| Tableau groups | ✔️   | ✔️                      |

## Requirements

Before you begin, you must:

* Be an Opal Admin
* Be on version `1.1187.0`, if you self-host Opal

## 1. Create a Connected App in Tableau

To allow Opal to access to your Tableau users and groups and grant permission to assign and remove users from groups, you must first create a (Connected App)\[[https://help.tableau.com/current/online/en-us/connected\_apps\_direct.htm](https://help.tableau.com/current/online/en-us/connected_apps_direct.htm)].

<Tip>
  We recommend you create a dedicated Tableau user (e.g. [opal-service@company.com](mailto:opal-service@company.com)) with Site Administrator Creator privileges for this integration. Using a personal admin account risks breaking the integration if that user leaves the organization.
</Tip>

In Tableau, go to **Settings > Connected Apps > New Connected App > Direct Trust**. Fill in the following:

* Connected app name: Enter a descriptive name (e.g. “Opal”)
* Access level: All projects
* Domain allowlist: All domains

On the app details page, click **Generate New Secret** and save the Secret ID and Secret Value. Click the actions menu next to the app name and select Enable.

You will need the following values when configuring the connection in Opal:

| Value        | Where to find it                                                                                                                                                                                                                                                   |
| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Client ID    | Shown on the Connected App details page                                                                                                                                                                                                                            |
| Secret ID    | Shown after generating a secret                                                                                                                                                                                                                                    |
| Secret Value | Shown once when the secret is generated                                                                                                                                                                                                                            |
| Username     | The email of the dedicated Tableau admin user (e.g. [opal-service@company.com](mailto:opal-service@company.com)). This user must have Site Administrator Creator or Site Administrator Explorer privileges. Opal will impersonate this user when making API calls. |

## 2. Create Tableau app in Opal

In Opal, go to **Inventory** > **+App** and select **Tableau**. Name your Tableau app, provide a description, and enter the token and token name you generated in step 1.

After you save the app, you can import groups from **...** > **Import items**.

***