In some cases, you may need to manually set security policy for your Run As service account. For example, some organizations run Windows Group Policy that remove "Log on as a service" or "Allow log on locally" rights that have been set on user accounts. We recommend using a domain User account for the Run As service account. Updating the Run As service account with an account that is a member of local administrators or domain administrators is not a good security practice. Note: If the Run As service account that you specify in TSM is a member of the local administrators or a domain administrator, then TSM may not update the local security policy. This elevated policy is required because the Run As service account is used as the security context for the Tableau Server Application Manager service (tabsvc). TSM will update the local security policy to give "log on as a service" and "log on locally" permissions to the Run As service account. After you specify a Run As service account in Tableau Services Manager (as described in the topic, Change the Run As Service Account), TSM will update the local security policy on the computer running Tableau Server.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |