{
  "schema": "aaes/capability-pack/1",
  "provider": "tableau",
  "version": "1.0.0",
  "description": "Tableau REST API on the customer's own Tableau Server or Tableau Cloud site: read workbooks, data sources and users, update and publish workbooks, refresh data source extracts, and delete workbooks and data sources.",
  "notes": "The endpoint host 'tableau-instance.invalid' is a reserved non-production placeholder (an RFC 2606 reserved TLD): substitute the customer's Tableau Server base URL — or, for Tableau Cloud, the pod host such as <pod>.online.tableau.com — before enabling, in every endpoint, in the resource locators and in every egress allowlist entry; the allowlist matches exactly, so all three must be substituted together, and substitution is a required deployment step. SITE_ID, WORKBOOK_ID and DATASOURCE_ID in the paths are placeholders the deployment binds to concrete values before enabling, and SITE_ID is the site LUID returned by the Sign In response for the site the deployment governs.\n\nThe paths PIN REST API version 3.29: the fetched reference pages present 3.29 as the current version and the operation contracts registered here were reviewed against those pages — a deployment that binds a different version must re-review the operations, because capabilities vary by version. Session-token model, these endpoints do not accept the stored vault secret directly. An external deployment process calls Sign In (POST /api/{version}/auth/signin) with a personal access token name and secret plus the site's contentUrl, receives a short-lived credentials token and the site LUID, and stores the token as the complete X-Tableau-Auth value under the vault reference — see the credential note for the full lifecycle.\n\nThis pack registers no auth/signin or auth/signout capability: session establishment is the credential process, not a governed business operation.\n\nDocumented exclusions — this pack does not register: Add User to Site and site-role changes (access granting — share-class operations requiring their own review); the permissions endpoints (Add/Delete Workbook or Data Source Permissions — direct ACL grants on content); Create Subscription (emails workbook content to recipients on a schedule — send-class, and a share of rendered data outside the platform); Publish Data Source and publish-append/replace modes (content publication the integration does not require); server-administration endpoints (Create Site, server settings, server-info configuration); flow and extract-refresh task management; Sign In with the user element (server-administrator impersonation of another user); connected-app and unified-access-token JWT sign-in flows; and the encrypted keychain endpoints (retrieveKeychain/uploadKeychain migrate embedded credentials between servers — credential-material movement, excluded outright).\n\nThese operations are excluded.\n\nApproval classification: publish and extract refresh are registered with the deploy action at the minimum R3 tier — they change the content and data every viewer of the site consumes, which is deploy-equivalent; deploy is one of the designated actions requiring human approval. Update Workbook is registered update, share and transfer at the minimum R3 tier because its unrestricted body can change the workbook's owner and project, and moving a workbook into a project changes its effective permissions through project permission inheritance — an access change, not a cosmetic edit.",
  "credential": {
    "secret_ref_id": "secret-ref-tableau-session-token",
    "custody": "customer_vault",
    "inject": "header",
    "inject_name": "X-Tableau-Auth",
    "note": "A Tableau credentials token (session token) for one site, held in the client's own secret manager. The stored material must be the complete X-Tableau-Auth header value — the token string returned by Sign In, verbatim. Token issuance is an external process this pack does not register: the deployment's custody job calls Sign In (POST /api/{api-version}/auth/signin) with a personal access token name and secret and the site's contentUrl, parses the credentials token, site LUID and user LUID out of the response, and writes the token under this reference.\n\nTableau strongly recommends PAT sign-in over username and password; on Tableau Cloud with MFA, a PAT (or a connected-app/UAT JWT flow, which this pack does not register) is required. The PAT itself is long-lived (Tableau Server: one year by default; Tableau Cloud: per the site setting; unused PATs expire after 15 consecutive days) and should live in a separate vault entry the sign-in job reads — the value under THIS reference is the session token.\n\nExpiry and revocation: the credentials token expires after 240 minutes IDLE by default, tunable via wgserver.session.idle_limit — an idle timeout, not a bounded maximum lifetime: active use keeps extending the session, and the reviewed documentation states no hard cap — and the token is site-scoped: it returns 403 against any other site. The custody job must re-sign-in and update the stored value before expiry; an expired value fails closed with a 401.\n\nSign Out invalidates the token immediately. Note carefully: the reviewed documentation does NOT state whether revoking a PAT invalidates credentials tokens already issued from it — the deployment must assume an issued token may remain usable until it expires or is signed out, so the session idle timeout is the effective revocation window and should be set accordingly.\n\nLeast privilege: issue the PAT to a dedicated service-account user with the minimum site role that covers these capabilities, and use one PAT per integration so revocation is granular (a user may hold multiple PATs).\n\nExecutor hygiene: the value must live only in executor memory for the lifetime of a call, must never be written to logs, traces or diagnostics, and must not appear in crash dumps; a deployment that cannot meet that bar must not enable the pack."
  },
  "capabilities": [
    {
      "capability_id": "tableau.workbooks.read",
      "version": "1.0.0",
      "kind": "tool",
      "risk_tier": "R0",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN",
      "data_class": "internal",
      "egress_allowlist": [
        "tableau-instance.invalid"
      ],
      "endpoint": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID/workbooks",
      "method": "GET",
      "connector": "http",
      "custody": "customer_vault",
      "secret_ref_id": "secret-ref-tableau-session-token",
      "inject": "header",
      "inject_name": "X-Tableau-Auth",
      "actions": [
        "read"
      ],
      "resource_id": "tableau-site-content",
      "description": "List the workbooks on one site (a filtered, sorted list of all or selected fields per the documented Query Workbooks for Site method); this pack registers the collection read only — single-workbook reads and workbook content downloads are not registered. Workbook names, projects and owners reveal the organization's reporting layout. SITE_ID is a placeholder the deployment binds before enabling and the path pins REST API version 3.29 (see the pack notes); the host is a reserved placeholder.",
      "requires_review": true
    },
    {
      "capability_id": "tableau.datasources.read",
      "version": "1.0.0",
      "kind": "tool",
      "risk_tier": "R0",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN",
      "data_class": "internal",
      "egress_allowlist": [
        "tableau-instance.invalid"
      ],
      "endpoint": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID/datasources",
      "method": "GET",
      "connector": "http",
      "custody": "customer_vault",
      "secret_ref_id": "secret-ref-tableau-session-token",
      "inject": "header",
      "inject_name": "X-Tableau-Auth",
      "actions": [
        "read"
      ],
      "resource_id": "tableau-site-content",
      "description": "List the published data sources on one site; this pack registers the collection read only — Query Data Source (GET.../datasources/{datasource-id}), connection-detail reads and.tdsx downloads are not registered. Data source names, types and projects reveal where the organization's reporting data lives. SITE_ID is a placeholder the deployment binds before enabling and the path pins REST API version 3.29 (see the pack notes); the host is a reserved placeholder.",
      "requires_review": true
    },
    {
      "capability_id": "tableau.users.read",
      "version": "1.0.0",
      "kind": "tool",
      "risk_tier": "R0",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN",
      "data_class": "pii",
      "egress_allowlist": [
        "tableau-instance.invalid"
      ],
      "endpoint": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID/users",
      "method": "GET",
      "connector": "http",
      "custody": "customer_vault",
      "secret_ref_id": "secret-ref-tableau-session-token",
      "inject": "header",
      "inject_name": "X-Tableau-Auth",
      "actions": [
        "read"
      ],
      "resource_id": "tableau-site-users",
      "description": "List the users on one site (the documented Get Users on Site method): names and site roles, which are personal data, so the read is classified as pii (personal data). This pack registers the collection read only — single-user reads are not registered, and Add User to Site is a documented exclusion (see the pack notes). SITE_ID is a placeholder the deployment binds before enabling and the path pins REST API version 3.29 (see the pack notes); the host is a reserved placeholder.",
      "requires_review": true
    },
    {
      "capability_id": "tableau.workbook.update",
      "version": "1.0.0",
      "kind": "tool",
      "risk_tier": "R3",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN",
      "data_class": "internal",
      "egress_allowlist": [
        "tableau-instance.invalid"
      ],
      "endpoint": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID/workbooks/WORKBOOK_ID",
      "method": "PUT",
      "connector": "http",
      "custody": "customer_vault",
      "secret_ref_id": "secret-ref-tableau-session-token",
      "inject": "header",
      "inject_name": "X-Tableau-Auth",
      "actions": [
        "update",
        "share",
        "transfer"
      ],
      "resource_id": "tableau-site-content",
      "description": "Update workbook details. The unrestricted body can also change its project or owner. Moving projects changes effective access through inherited permissions; changing owner transfers the content to another user. The capability therefore declares update, share, and transfer at R3.\n\nEnforce any restriction to metadata-only edits in policy. Bind SITE_ID and WORKBOOK_ID before enabling. The path pins REST API version 3.29; see the package notes.",
      "requires_review": true
    },
    {
      "capability_id": "tableau.workbook.publish",
      "version": "1.0.0",
      "kind": "tool",
      "risk_tier": "R3",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN",
      "data_class": "internal",
      "egress_allowlist": [
        "tableau-instance.invalid"
      ],
      "endpoint": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID/workbooks",
      "method": "POST",
      "connector": "http",
      "custody": "customer_vault",
      "secret_ref_id": "secret-ref-tableau-session-token",
      "inject": "header",
      "inject_name": "X-Tableau-Auth",
      "actions": [
        "deploy"
      ],
      "resource_id": "tableau-site-content",
      "description": "Publish a workbook to a site, either in one part or by committing a multipart upload. Publishing exposes content to site viewers; overwrite replaces a workbook they already use. Registered as deploy at R3. A later replacement cannot undo what viewers have already seen.\n\nThe unrestricted multipart body can include connectionCredentials with embed=true, which stores database credentials on the server beside the workbook. Handle a body containing those values as secret material.\n\nBind SITE_ID before enabling. The path pins REST API version 3.29; see the package notes.",
      "requires_review": true
    },
    {
      "capability_id": "tableau.datasource.refresh",
      "version": "1.0.0",
      "kind": "tool",
      "risk_tier": "R3",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN",
      "data_class": "internal",
      "egress_allowlist": [
        "tableau-instance.invalid"
      ],
      "endpoint": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID/datasources/DATASOURCE_ID/refresh",
      "method": "POST",
      "connector": "http",
      "custody": "customer_vault",
      "secret_ref_id": "secret-ref-tableau-session-token",
      "inject": "header",
      "inject_name": "X-Tableau-Auth",
      "actions": [
        "deploy"
      ],
      "resource_id": "tableau-site-content",
      "description": "Refresh a published data source's extract now (the documented Update Data Source Now method on the data sources resource). Registered with the deploy action at the minimum R3 tier: the refresh queries the underlying source system and rewrites the extract that every dependent workbook serves to its viewers — the data the organization sees changes as a direct effect of this call, which is deploy-equivalent, and deploy is one of the designated actions requiring human approval. SITE_ID and DATASOURCE_ID are placeholders the deployment binds before enabling and the path pins REST API version 3.29 (see the pack notes).",
      "requires_review": true
    },
    {
      "capability_id": "tableau.workbook.delete",
      "version": "1.0.0",
      "kind": "tool",
      "risk_tier": "R3",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN",
      "data_class": "internal",
      "egress_allowlist": [
        "tableau-instance.invalid"
      ],
      "endpoint": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID/workbooks/WORKBOOK_ID",
      "method": "DELETE",
      "connector": "http",
      "custody": "customer_vault",
      "secret_ref_id": "secret-ref-tableau-session-token",
      "inject": "header",
      "inject_name": "X-Tableau-Auth",
      "actions": [
        "delete"
      ],
      "resource_id": "tableau-site-content",
      "description": "Delete a workbook. Per the documentation, deleting a workbook deletes all of its assets with it — associated views, data connections and so on — so the blast radius is the whole workbook, not one record, and subscribers and embedded links break. Registered as delete at the minimum R3 tier; delete is one of the designated actions requiring human approval. SITE_ID and WORKBOOK_ID are placeholders the deployment binds before enabling and the path pins REST API version 3.29 (see the pack notes).",
      "requires_review": true
    },
    {
      "capability_id": "tableau.datasource.delete",
      "version": "1.0.0",
      "kind": "tool",
      "risk_tier": "R3",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN",
      "data_class": "internal",
      "egress_allowlist": [
        "tableau-instance.invalid"
      ],
      "endpoint": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID/datasources/DATASOURCE_ID",
      "method": "DELETE",
      "connector": "http",
      "custody": "customer_vault",
      "secret_ref_id": "secret-ref-tableau-session-token",
      "inject": "header",
      "inject_name": "X-Tableau-Auth",
      "actions": [
        "delete"
      ],
      "resource_id": "tableau-site-content",
      "description": "Delete a published data source. Per the documentation, its associated data connection is deleted with it, and workbooks that use the data source are not deleted but no longer work properly — the blast radius extends to every dependent workbook. Registered as delete at the minimum R3 tier; delete is one of the designated actions requiring human approval. SITE_ID and DATASOURCE_ID are placeholders the deployment binds before enabling and the path pins REST API version 3.29 (see the pack notes).",
      "requires_review": true
    }
  ],
  "resources": [
    {
      "resource_id": "tableau-site-content",
      "kind": "api",
      "locator": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID",
      "data_class": "internal",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN"
    },
    {
      "resource_id": "tableau-site-users",
      "kind": "api",
      "locator": "https://tableau-instance.invalid/api/3.29/sites/SITE_ID/users",
      "data_class": "pii",
      "owner": "REPLACE-WITH-ACCOUNTABLE-HUMAN"
    }
  ],
  "review": {
    "state": "library",
    "date": "2026-09-22",
    "sources": [
      "https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_concepts_auth.htm (retrieved 2026-09-21)",
      "https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_ref_workbooks_and_views.htm (retrieved 2026-09-21)",
      "https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_ref_data_sources.htm (retrieved 2026-09-21)",
      "https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_ref_users_and_groups.htm (retrieved 2026-09-21)"
    ],
    "reviewer_id": "aaes-eng"
  }
}