Hi, Zaheer. I want to make sure I fully understand. You started by saying that you didn't want users to be able to download underlying data, just summary data. However, further on it sounds as if you have determined that is not feasible and you instead want to trace (audit) when a user does download the underlying data. Is that accurate?
I remember that there is a workaround suggested by Mr.Andrew Macey in the following threadNeed to get number of download request to Tableau Server .Please look into the SQL file shared by him it might help you.
Ideally, we want users to be able to connect to the data set, create reports and visualizations. But we don't want to allow users to pull down underlying data just summary data. However, Tableau current security model doesn't deny content owner from downloading underlying data (despite with explicitly deny permission of 'Download Full Data').
So we have to compromise it, and follow the monitoring approach with warning users that they are not supposed to download underlying data.
Hello Tharashasank and Obed,
I looked into the data dictionary and SQL file, but didn't find the 'full data download' entries in the database. It seems Tableau does not record historical event when downloading underlying data from worksheet/view screen.
The 'historical_event_types' table only covers limited events.
Did you check the info which i posted . Is it is useful for you.
Hello zaheer ,
Did you check the response of Mr.Andrew Macey in this thread Need to get number of download request to Tableau Server Andrew Macey
-- count of downloads in last 30 days broken down by workbook/datasource type and site name
SELECT HT.name Object_Type, HS.name Site_Name, count(*)
FROM public.historical_events HE
LEFT JOIN public.historical_event_types HT ON (HE.historical_event_type_id = HT.type_id)
LEFT JOIN public.hist_sites HS ON (HE.hist_actor_site_id = HS.id)
where HT.name in ('Download Data Source','Download Workbook' )
and HE.created_at > now() - '30 day '::interval
group by HT.name, HS.name
Actually, I had already investigated the Tableau Server underlying database before posting on this forum.
Yes, indeed I read the Andrew Macey full thread.
Many thanks for helping out.
Thank you for the topic Zaheer.
There is still not a way to track when users download PDFs, crosstabs, and full data, although it doesn't seem like it would be that difficult to add these types to the system already in place. I was hoping it had been added in v10.
The options discussed above will tell you when someone downloads an entire workbook or data source, which isn't the same thing at all. Very few people are able to do those tasks in our PRD system...it's the masses we have to keep our eye on (required healthcare monitoring).
There are two ideas on this topic you can vote on:
Has the ability to audit activities around downloads been added in v10?
We are being asked to report on the following for data downloads:
- Who downloaded
- What data was downloaded
- Query used to fulfill the request
Our security team wants to know that enough information can be provided by Tableau to recreate the download, if necessary.