You can set the Run As service account during Tableau Server installation, or you can update the Run As service account using the TSM Web UI. For information on best practices when creating a Run As service account, see Creating the Run As service account. Using a domain account that is not a member of these administrator groups is a good security practice and can help avoid access to certain data sources and folders. Instead we recommend using a domain user account that is not an administrator for the Run As service account. The account you use for the Run As service account should not be a member of the Local Administrators or Domain Administrators account.
For more information, see Data Access with the Run As Service Account We make the same recommendation to you as you plan Run As service account. A general best security practice is to limit the scope of all user accounts to the minimum required permissions. The account that is configured for Run As service account must also have elevated permissions to the local Tableau Server.
HOW TO FIX JOIN DOMAIN USER LIMIT WINDOWS
Specifically, if Tableau Server needs to access other servers, file shares, or databases that use Windows authentication, then the account that is configured for Run As service account will be used to access those resources. In either case, it’s important to understand the security implications of the account that Tableau Server uses for the Run As service account. If it does not, then you will need to update the Run As service account to run under a domain account that has access to the resources in your Active Directory domain(s). In some cases, Tableau Server may use the Run As service account to access data from external sources, such as databases or files on a shared network directory.Īs you plan your Tableau Server deployment, you need to determine if the default Run As service account, configured to run under the context of the local Network Service account (NT Authority\Network Service), will suffice for your needs. From the perspective of Windows, Tableau Server is doing this as the Run As service account.
For example, Tableau Server reads and writes files on the computer where Tableau Server is installed. The Run As service account is a Windows account that Tableau Server uses ("runs as") when it accesses resources.
0 kommentar(er)
