Restricted is the correct General Access state. Salesforce documents that newly created Tableau Next assets are restricted by default. When General Access remains restricted, only individual users or Analytics Groups that have been explicitly granted access can open the asset.
For sensitive dashboards, this provides the correct baseline because access is opt-in rather than org-wide. The owner can then grant specific users or groups Viewer access and, where supported at the workspace level, Editor access.
Salesforce also makes an important distinction between Tableau Next asset access and underlying data access.
Even if a dashboard is shared with a user, that action does not automatically grant permission to the DLOs, DMOs, or data spaces on which the dashboard depends. Data 360 governance still applies separately.
"Public" and "Shared" are not the documented General Access states that produce the required private-by- default behavior. Current Tableau Next access management uses Restricted as the state in which only explicitly shared users or groups can access an asset.
For sensitive content, the architecture should therefore use Restricted asset access + explicit user/group sharing + Data 360 governance.
References/Topics: Managing Workspaces and Orgs - > General Access - > Restricted - > Asset Sharing - > Data Governance.