Excellent question! No idea but looking forward to the answer
I am not sure how this would be possible, but I've been surprised before.
Why not utilize projects with different permissions, one for MI team, and another for those other users?
The answer is no. Sites are completely siloed. Like Matt said, If sharing data sources is a need for each partition then sites are not what you need to be using but rather, projects with well defined permissions.
Separate Project is another option and this is where I would some feedback on how other people manage this scenario of user-publishing:
Here projects are organised by Department, but All Users can see all Projects. here are the options:
- separate Site
- separate rights for Desktop users to their own Department / Project
- separate Project for each Desktop use to publish and share their own workbooks
Is this basically just for a "sandbox" environment?
No it's not a sandbox, we have a Dev Site for that - as Tableau is designed to be a user tool business users need to be able to publish their own workbooks and share with colleagues. We would like to keep these areas separate from our own central MI Team area. The various options above are possible and I would like to hear how other people do this.