Attempting to add a new user to site w/ SAML authentication
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 42/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Quiet
- Tech stack
- python
- Domain
- api, authentication
Research direction
Start with the shown create_user function, TSC.UserItem, and server.users.add call, then reproduce the SAML and ServerDefault cases against the listed Tableau Server, Python, and TSC versions. Compare the resulting permissions and user-creation behavior; done when the cause of the SAML-specific 403034 response and the expected library behavior are established.
Written by the indexing model from the issue text.
Description
Describe the bug
I have written a script that creates a batch of users based on json input. It works great with the exception of one caveat. My list of users only contains two users, and all users are created with SAML as their authentication method. When creating them, one of the users works fine, however one of them fails with the following error message. The user is still created, but is not created with "SAML" authentication. If I change the SAML authentication to ServerDefault, then everything works perfectly, and no exception is thrown. The only thing notable about the failing user is that every other site has the a username just like this one. This is essentially our global sso admin user.
403034: Forbidden
Only system administrators can add users to sites, query sites for user membership, or remove users from sites.
Versions
Details of your environment, including:
- Tableau Server version - 20204.21.0114.0916
- Python version - Python 3.9.2
- TSC library version - 0.14.0
To Reproduce
Below is my code that is handling the user creation. I only listed the portion of code that is failing and the snippet for configuring the server connection. I am calling this with an email address for the username, a basic name, and a role of 'explorer'. The server connection is configured with the new site that I am provisioning users for.
# configuration for tableau
server = TSC.Server( server_url, use_server_version=True )
tableau_auth = TSC.TableauAuth( username, password, site_name )
....
# function for creating users
def create_user( server, tableau_auth, username, full_name, user_role ):
with server.auth.sign_in( tableau_auth ):
try:
# Attempt to create New User
new_user = TSC.UserItem( username, user_role, auth_setting='SAML' )
user_item = server.users.add( new_user )
print( f'New User was Created: {username}'"\n" )
....
Results
403034: Forbidden
Only system administrators can add users to sites, query sites for user membership, or remove users from sites.
NOTE: Be careful not to post user names, passwords, auth tokens or any other private or sensitive information.
- Dominant language
- Python
- Stars
- 716
- Forks
- 446
- Avg merge
- 8d 8h
- Merged PRs (30d)
- 2
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from tableau/server-client-python
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
tableau/server-client-python#1865 ·
-
in-progress
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
tableau/server-client-python#1829 · 1 comment ·
-
enhancement gap needs investigation
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
tableau/server-client-python#1322 · 1 comment ·
-
[Type2] Allow Incremental Refresh type schedules to be added via `server.schedules.add_to_schedule` Openhelp wanted Server-Side Enhancement ui-exists
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
tableau/server-client-python#1101 · 3 comments ·
-
enhancement good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
tableau/server-client-python#783 · 5 comments ·
All issues in tableau/server-client-python
Similar issues
-
link-check link-check:sphinx-theme
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
qgis/QGIS-Documentation#11275 ·
-
bug priority:normal ready-for-dev
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
OpenHands/extensions#626 · 1 comment ·
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
CSCfi/sd-search-api#39 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100