Could someone summarize the security model(s) in Tableau, as far as authentication and authorization?

Say I wanted to implement a SAAS system that hosts data from multiple clients. I'd want multi-tenancy so clients can connect with Tableau, get authenticated, then work only with their data. In other words, what would be the permissioning model? Would ACL's, roles, row-based security be supported?

Thanks.