Security for Tableau reports can be set at different levels:
1. How to set up database security by publishing the workbook to prompt users using Tableau desktop:
2. How to set up the database security by publishing the workbook to prompt users using Tableau web:
When using the ITS Governed Data Sources, your users should be approved (by adding them to the AD group for your folder) to both run the reports you have built and the view data the report is looking at. When you publish the workbook to prompt user then you are ensuring that your customers have also been approved for data source access.