Specify authentication method

When creating the data source in Tableau, specify the authentication method as Sign in using OAuth. This setting will allow you to use your enterprise SSO to connect to your compute platform.

Set up a live connection

After connecting to the compute platform, select the tables you will use for your data source. Then, select Live connection. This setting is required for Immuta to enforce policies.

Credential prompt

To share your dashboard to your organization, publish your data sources. During this process, set the authentication method to Prompt user. This option ensures that dashboard viewers will see the data according to their personal policies.

Resources

• Snowflake guide: https://help.tableau.com/current/pro/desktop/en-us/snowflake_oauth.htm

• Databricks guides:

  • https://help.tableau.com/current/pro/desktop/en-us/examples_databricks.htm

  • https://docs.databricks.com/partners/bi/tableau.html

  • https://learn.microsoft.com/en-us/azure/databricks/partners/bi/tableau

  • https://docs.databricks.com/integrations/configure-oauth-tableau.html

• Redshift guide: https://help.tableau.com/current/pro/desktop/en-us/examples_amazonredshift.htm

Specify authentication method

When creating a data source in Power BI, specify Microsoft Account as the authentication method, if available. This setting allows you to use your enterprise SSO to connect to your compute platform.

Set up DirectQuery

After connecting to the compute platform and the tables to use for your data source, select DirectQuery to connect to the data source. This setting is required for Immuta to enforce policies.

Publish data

After you publish the datasets to the Power BI service, force users to use their personal credentials to connect to the compute platform by following the steps below.

1. Enable SSO in the tenant admin portal under Settings -> Admin portal -> Integration settings.

2. Find the option to manage Data source credentials under Settings -> Datasets.

3. For most connectors you can enable OAuth2 as the authentication method to the compute platform.

4. Enable the option Report viewers can only access this data source with their own Power BI identities using DirectQuery. This forces end-users to use their personal credentials.

Resources

• Snowflake guides:

  • https://www.snowflake.com/blog/using-sso-between-power-bi-and-snowflake

  • https://docs.snowflake.com/en/user-guide/oauth-powerbi

• Databricks guide: https://learn.microsoft.com/en-us/azure/databricks/partners/bi/power-bi#access-azure-databricks-data-source-using-the-power-bi-service

• Redshift guide: https://aws.amazon.com/blogs/big-data/integrate-amazon-redshift-native-idp-federation-with-microsoft-azure-ad-and-power-bi