Tableau connects through a Connected App using OAuth via JWT. This Duvo connection currently supports Connected App credentials only, so you create a Connected App in your Tableau site settings and provide those credentials to Duvo.
Setup
Confirm prerequisites
A Tableau Cloud or Tableau Server account with site role Explorer or higher.
A site admin must create and enable a Connected App (Direct Trust) for Duvo. The app is disabled by default after creation and must be explicitly enabled.
VizQL Data Service must be enabled on the site for data source schema and query capabilities. Available on Tableau Cloud by default; Tableau Server requires version 2025.1+.
Data Management license at the site level for Metadata API access (used for data source field enrichment).
- Sign in to Tableau as a site admin.
- Go to Settings > Connected Apps.
- Click New Connected App > Direct Trust.
- Enter a name (e.g.,
Duvo Integration). - Click Create.
- Copy the Client ID displayed on the app page.
- Click Generate New Secret. Copy both the Secret ID and Secret Value (the secret value is shown only once).
- Enable the Connected App — it is disabled by default. Click the three-dot actions menu next to the app and select Enable. Authentication will fail until the app is enabled.
Grant the required permissions
The Tableau account you connect must have:
- Site role of Explorer, Explorer (Can Publish), Creator, Site Administrator Explorer, or Site Administrator Creator. Viewer is not sufficient.
- View capability on workbooks and views that Duvo should access.
- View and Connect capabilities on data sources that Duvo should access.
- API Access capability on data sources for schema and query operations. This is not granted by default and must be explicitly assigned by an admin per data source or via project default permissions.
Add the connection in Duvo
On the Connections page, open Tableau and fill in these fields:
The Client ID shown when you create the Connected App in Tableau.
The UUID generated when you click Generate New Secret in the Connected App settings.
The secret value shown once when the secret is generated. Copy and store it securely.
The Tableau username to act as. Use the user’s email address for Tableau Cloud, or their Tableau username for Server.
The base URL of your Tableau Cloud or Tableau Server site (e.g.,
https://dub01.online.tableau.com).The site name from your Tableau URL after
/site/. For Tableau Server default site, leave this blank.Third-party documentation
Third-party documentation
- Connected Apps (Direct Trust) — creating and managing Connected Apps.
- REST API Authentication — overview of Tableau authentication methods.
- VizQL Data Service Configuration — enabling data source queries.
Capabilities
- Browse published content — List and discover workbooks, dashboards, views, and projects across your Tableau site.
- Inspect data source schemas — Retrieve field names, types, and metadata for any connected data source.
- Run read-only queries — Execute queries against published data sources and return results, without modifying any data in Tableau.
Key Benefits
- Direct access to live analytics — Query dashboards and data sources without manual logins or CSV exports.
- Automated data-driven workflows — Use real-time Tableau data to trigger actions, populate reports, or inform decisions.
- Consistent source of truth — Agents always reference the same published dashboards and data sources your team relies on.
- No data duplication — Query data in place rather than exporting and re-importing between tools.
Works Well With
Google Sheets
Pull data from Tableau data sources into spreadsheets for further analysis or distribution.
Slack
Post dashboard summaries or metric alerts to channels based on Tableau data.
Gmail
Include Tableau-derived insights in automated email reports sent to stakeholders.