3 Replies Latest reply on Dec 10, 2014 1:14 AM by Eric McDonald

    Alternatives to tabcmd login as service account user

    Eric McDonald

      We run several batch scripts on our server to do admin tasks like updating users or batch extracting wokrbooks. These use tabcmd which logs-in to the server using the active directory service account. Is it possible to run tabcmd and login as a different user? If so what permissions would this user need?

       

      Tableau Server version 8.2.5

        • 1. Re: Alternatives to tabcmd login as service account user
          Jeff Strauss

          You have a few options, based on personal experience.  All that's needed is that the service account is an established user with authorization within your server postgres repository, but also make sure that it has rights to run batch scripts on your server and your script runs using this id.

           

          1. You can use one service account, but if you happen to be running multiple scripts simultaneously, then it's probable that the login's / logout's will trip over one another because one cookie is stored within the roaming directory (per id) of whereever you run the tabcmd at.  If you have this concurrent use scenario, an option to overcome this is to get rid of the login all together and then run cookieless using -s, -u, -p and --no-cookie on each tabcmd.  The downside is that it creates a session for each tabcmd.

           

          2. If you want to run with cookies (in order to manage the # of active sessions that the script is creating), then you can designate multiple service accounts.

           

           

          Does this help?

          1 of 1 people found this helpful
          • 2. Re: Alternatives to tabcmd login as service account user
            Vien Hua

            Hi Eric,

             

            I think the short answer here is yes. When you run tabcmd, it's running under the local Windows account (which should work as long as they have admin privileges on the computer). Then you can login to tabcmd using something like:

             

            tabcmd login -s http://tabserver -u TableauUser

             

            Where "TableauUser" can be any user on Tableau Server, but to do certain tasks like syncing AD groups, then it should be a system admin on Tableau Server.

             

            Let me know if you have any questions.

             

            Vien

            1 of 1 people found this helpful
            • 3. Re: Alternatives to tabcmd login as service account user
              Eric McDonald

              This looks like it may work - I will give these suggestions a try.

               

              Thanks!