---
schema_version: "1"
id: 4b7ae1ddc46a09b049a7eb50e99f887b50c297ec92a0f0e3d6c107da21e15b70
title: Set Users’ Site Roles
collection: tableau
version: next
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/next/en-gb/online/users_site_roles.md
canonical_url: https://help.tableau.com/v0.0/online/en-gb/users_site_roles.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 6b84f351fb32affef7c56702629252fe4f64f142300a1d309cbd6201a297d724
description: Set users' site roles to determine their level of access on a site.
---
[Skip to main content](#main-content)

# Set Users’ Site Roles

When you add users to a site on Tableau Cloud, independent of their licence type, you must apply a _site role_ to them. The site role signifies the maximum level of access a user can have on the site. Along with content permissions, the site role determines who can publish, interact with or only view published content, or who can manage the site’s users and administer the site itself.

## How user licences, site roles and content permissions work together

The intersection of a user’s licence type, site role and content permissions determines the level of access a user has on the Tableau site.

1. The licence type is associated with the user. The site role you want to assign to the user determines the licence type they require.
    
    If a user is a member of multiple Tableau Cloud sites, they must have a licence for every site they belong to.
2. The site role is also set at the user level. If a user is a member of multiple Tableau Cloud sites, they will have independent site roles. For example, the same user can have the Site Administrator Creator site role on one site and the Viewer site role on another site.
    
    The site role defines the maximum capabilities the user can have.
3. Whether the site role’s maximum capabilities are available to the user depends on the permissions set on the content resources (projects, data sources, workbooks).

For example, let's say that a user has the following access on a site:

- Creator licence
- Explorer site role
- Save permission capability on a project

In this scenario, the licence allows connecting to and creating new data sources in the web editing environment or Tableau Desktop, and a permission rule allows them to save in a project. However, their site role prevents them from being able to save, so their effective permissions don’t include the save capability. Therefore, the user can’t publish content to the site.

Even if a user has a creator licence and a creator site role, if they don’t have the save capability on at least one project, they can’t publish anything to the site.

For more information, see [Permissions](https://help.tableau.com/v0.0/online/en-gb/permissions.htm).

## Change a user’s site role

1. Sign in to the site as a site administrator, and go to the Users area.
2. Select the users, and then select Actions > Site Role.
    
    ![A table of site users with a dropdown menu open showing the option to remove users.](/tableau/next/en-gb/online/en-gb/Img/users_siterole_change.png)
3. Select the new site role, and then click Change Site Role.
    
    ![Select the new site role.](/tableau/next/en-gb/online/en-gb/Img/users_siterole_change_select_new.png)
    
    You can hover the pointer over the information icon to display a matrix that shows the maximum level of general capabilities each site role allows. For more information, continue to [General capabilities allowed with each site role](#site-role-capabilities-summary).

## General capabilities allowed with each site role

**Note:** This information focuses on _site_ roles and is more generalised. For a list of common specific tasks available per _licence_ role, see the matrix on the [For Teams & Organisations](https://www.tableau.com/en-gb/pricing/teams-orgs "Open the Tableau pricing page for subscription-based licensing in a new browser window") tab on the Tableau pricing page.

### Tableau site roles

<table class="simple-table" style="width: 100%;"><colgroup><col style="width:35%"><col style="width:65%"></colgroup><thead><tr><th style="background-color:#ccc;">Site role name</th><th style="background-color:#ccc;">Maximum capabilities this site role allows</th></tr></thead><tbody><tr><td colspan="2" style="background-color: #eaeaea;"><p><strong>Tenant roles that don't use a licence</strong></p></td></tr><tr><td colspan="2">– Users with this role have access to Tableau Cloud Manager.</td></tr><tr><td>Cloud Administrator</td><td><p>Available on Tableau Cloud Manager only; not assignable on Tableau Cloud sites.</p><p>This role is the highest level of administration within Tableau Cloud, enabling the creation of sites, management of users and allocation of licences across your organisation at the tenant level.</p><p>Cloud administrators don’t consume licences and only have access to Tableau Cloud Manager. To gain site access, cloud administrators can assign themselves a site role through Tableau Cloud Manager, thereby gaining access to any site within the tenant. For more information, see <a href="https://help.tableau.com/v0.0/online/en-gb/cloud_manager_intro.htm" class="xref">Use Tableau Cloud Manager</a>.</p></td></tr><tr><th colspan="2" style="background-color:#eaeaea;"><p><strong>Site roles that use a <span class="mc-variable Variables.sku-creator variable">Creator</span> licence</strong></p></th></tr><tr><td colspan="2"><p> – Users with these site roles have access to Tableau clients such as Tableau Prep, <span class="mc-variable Variables.TabsProductDesktop variable">Tableau Desktop</span>, Tableau Bridge and Tableau&nbsp;Mobile.</p></td></tr><tr><td><p><span class="mc-variable Variables.siterole-siteadmin-author variable">Site Administrator Creator</span></p></td><td><p>This is the highest level of access for a Tableau Cloud site.</p><p>Unrestricted access to content as described above, but at the site level. Connect to Tableau or external data in the browser, <span class="mc-variable Variables.TabsProductDesktop variable">Tableau Desktop</span> or Tableau&nbsp;Prep; create new data sources; build and publish content.</p><p>On Tableau Server, server administrators can determine whether or not to allow site administrators to manage users and assign site roles and site membership. By default, on Tableau Server, and always on Tableau Cloud, site administrators are allowed these capabilities.</p></td></tr><tr><td><p><span class="mc-variable Variables.siterole-author variable">Creator</span></p></td><td><p>This is similar to the former Publisher site role, but allows new features. This site role offers non-administrators the maximum level of <em>content</em> access.</p><p>Connect to Tableau or external data in the browser, build and publish flows, data sources and workbooks, have access to Dashboard Starters and use interactive features on published views. Can also connect to data from Tableau Prep or <span class="mc-variable Variables.TabsProductDesktop variable">Tableau Desktop</span>, and publish (upload/save) and download flows, workbooks and data sources.</p></td></tr><tr><th colspan="2" style="background-color:#eaeaea;"><p>Site roles that use an <span class="mc-variable Variables.sku-explorer variable">Explorer</span> licence</p></th></tr><tr><td colspan="2"><p> – Users with these site roles can access the server from the browser or Tableau Mobile.</p></td></tr><tr><td><p>Site Administrator Explorer</p></td><td><p>Same access to site and user configuration as Site Administrator Creator, but can’t connect to external data or virtual connections from the web editing environment.</p><p>Can connect to Tableau published data sources&nbsp;to create new workbooks, and edit and save existing workbooks. Can’t edit and save existing flows. Can’t publish Tableau Prep flows.</p></td></tr><tr><td><p>Explorer&nbsp;(can publish)</p></td><td><p>Can publish workbooks from the web using existing data sources, browse and interact with published views and use all interaction features.</p><p>In the web editing environment, can edit and save existing workbooks. Can run Tableau Prep flows if granted the <span class="uicontrol">Run Flows</span> permissions. Can’t save new stand-alone data sources from data connections embedded in workbooks, and can’t connect to external data or virtual connections, or create new data sources. Can’t edit and save existing flows. Can’t publish Tableau Prep flows.</p></td></tr><tr><td><p>Explorer</p></td><td><p>Can browse and interact with published views. Can subscribe to content, create data driven alerts, connect to Tableau published data sources and open workbooks in the web authoring environment for ad-hoc queries, but they can’t save their work. Can’t connect to a virtual connection. Can’t edit and save existing flows. Can't publish or run Tableau Prep flows.</p></td></tr><tr><th colspan="2" style="background-color:#eaeaea;"><p><a name="viewer"></a>Site roles that use a Viewer licence</p></th></tr><tr><td><p>Viewer</p></td><td><p>Can see published views others have created and use most interaction features. Can subscribe to views and download as images or summary data. Can’t connect to data, create, edit or publish content or set data alerts.</p><p>For a list of specific capabilities, see the <strong>Viewer</strong> column in the matrix on the <a alt="Link opens the Tableau license pricing page in a new browser tab" href="https://www.tableau.com/en-gb/pricing/teams-orgs" target="_blank" title="Link opens the Tableau licence pricing page in a new browser tab">Tableau pricing page</a>.</p><p><strong>Note:</strong>&nbsp;Although the Viewer site role existed in previous versions, the new Viewer site role has additional capabilities.</p></td></tr><tr><th colspan="2" style="background-color:#eaeaea;"><p>Other site roles</p></th></tr><tr><td><p>Unlicensed</p></td><td><p>Unlicensed users can’t sign in to Tableau Server or Tableau Cloud. Users are assigned the Unlicensed role in the following circumstances:</p><ul><li><p>You import users from a CSV&nbsp;file and their licence level is set to unlicensed.</p></li><li><p>The number of available licences is reached at the time you add or import users.</p></li><li><p>You remove a user who owns content on the site. The user will still own the content but not be able to do anything with it.</p></li></ul><p></p></td></tr></tbody></table>

## Who can publish content

The following site roles allow the specified level of publishing access.

- Site Administrator Creator; and Creator allow full connecting and publishing access.
    
    This includes connecting to data and publishing new flows, new workbooks and new data sources from Tableau Desktop and the web editing environment. The site roles also allow editing and saving existing published workbooks, or publishing updates to existing data sources.
- Explorer (Can Publish) and Site Administrator Explorer have limited publishing capabilities, as described in [General capabilities allowed with each site role](#site-role-capabilities-summary).
- Explorer, Viewer, Read Only and Unlicensed don’t allow publishing.