To allow Opal to access to your Tableau users and groups and grant permission to assign and remove users from groups, you must first create a Connected App.
We recommend you create a dedicated Tableau user (e.g. opal-service@company.com) with Site Administrator Creator privileges for this integration. Using a personal admin account risks breaking the integration if that user leaves the organization.
In Tableau, go to Settings > Connected Apps > New Connected App > Direct Trust. Fill in the following:
Connected app name: Enter a descriptive name (e.g. “Opal”)
Access level: All projects
Domain allowlist: All domains
On the app details page, click Generate New Secret and save the Secret ID and Secret Value. Click the actions menu next to the app name and select Enable.You will need the following values when configuring the connection in Opal:
Value
Where to find it
Client ID
Shown on the Connected App details page
Secret ID
Shown after generating a secret
Secret Value
Shown once when the secret is generated
Username
The email of the dedicated Tableau admin user (e.g. opal-service@company.com). This user must have Site Administrator Creator or Site Administrator Explorer privileges. Opal will impersonate this user when making API calls.
In Opal, go to Inventory > +App and select Tableau. Name your Tableau app, provide a description, and enter the token and token name you generated in step 1.After you save the app, you can import groups from … > Import items.
Last modified on August 13, 2026
Was this page helpful?
Assistant
Responses are generated using AI and may contain mistakes.