Tableau Unmetered Self-Service Consumer is the best match because these users only require consumption and conversational-analysis functionality rather than administrative or authoring privileges.
Salesforce's current permission-set documentation states that users assigned Tableau Unmetered Self-Service Consumer can browse, view, and interact with Tableau Next production assets and can use Tableau Agent. They can also view dashboards, visualizations, metrics, and other supported analytics without receiving the broader content-management capabilities associated with analyst or administrator roles.
The Tableau Unmetered Admin permission set provides substantially excessive privileges, including platform configuration, user administration, asset management, and governance capabilities. Assigning it would directly violate least-privilege design.
The Tableau Unmetered Platform Analyst permission set is intended for users who create, manage, and share governed Tableau Next assets. Those capabilities are unnecessary because the stated users will not create dashboards or semantic models.
The certification principle is straightforward: license and permission assignment should reflect the minimum required analytical persona. Conversational consumption alone does not justify authoring or administrative privileges.
References/Topics: Basic Setup and Admin - > Tableau Next Licenses and Permission Sets - > Self-Service Consumer - > Tableau Agent Access.
===========================================================================