Thanks Ciaran for the reply. To clarify, Signing in with specific user credentials through rest api is not a problem.
Below are two concerns we have:
1. Our issue is that the account which is used to trigger the refresh is external (i,e it is an AD account but belongs to different project team) and we didn't want to give this external account higher permissions like owner/site admin/server admin etc. We only want this account to trigger the refresh and not have complete access (owner access) over the workbook/project . But looks like that's how tableau is works.
2. Even though we assign this external account as owner on the workbook, every time the developer publishes the workbook, tableau overrides the existing owner with developer id. We have to manually go change this back to the external account.
Any ideas to avoid this is greatly appreciated.
Anytime you publish a workbook you will become owner, you cannot have a user stay owner of a workbook if it's being published by someone else unfortunately.