Let me know if you get an answer, we rarely login as tblwgadmin, but on occasion it is helpful.

Have you tried this?

Tableau Server DAAP (Database All-Access Pass)

Darn, okay.

I guess Tableau is locking some of its doors to our "creativity".

tblwgadmin pgsql.adminpassword adminpassword pgsql

On your Tableau Server host, open the file [ServerInstallRoot]\Tableau\Tableau Server\data\tabsvc\config\workgroup.yml

Search for the value: pgsql.adminpassword

This should work as the password to the tblwgadmin account. This is set randomly at install time--much better than "no password"!

Can you help me understand what the requirement or use-case is for having a super user role for the "tableau" user?

As of Tableau Server 8.2.5, the "readonly" user has read-only access to all of the tables. This should be sufficient to do any type of reporting on the database. We specifically do not let (or want) users to be able to modify the database as they wish. As you can imagine this could cause so many issues. Customers who have modified the database in the past faced issues when attempting to upgrade or taking backups and restoring.

Just be sure to take a backup before making any changes to the Postgres

Hi Vien.  Most times readonly works well for us.  We never directly update the internal PG repository, however we have run across the rare occasion where it's proves useful to query pg_largeobject which readonly does not have rights.

Vien, just to chime in with my own use cases for needing write access to the postgresql database:

• AD group renames without losing all our permissions
• Balance schedules for subscriptions--right now I have 8 separate schedules for our 6am weekday subscription schedule because we have more than 500 to send, and they will only be processed in parallel if you run them on separate schedules. I can manually balance the number of subscriptions in each schedule in the Server interface but it's very tedious.
• We customized the behavior for the Interactor role to include download rights on the content.
• Also need the same feature as The specified item was not found. : Querying the large object data (to export workbook / datasource definitions to file in bulk for analysis)

Now that I think about it more, there was one rare usecase where we did have an update.  It was a bulk update of our user emails from "xxx@dotomi.com" to "xxx@conversantmedia.com" for subscriptions.  It would be analogous of going from "xxx@tableausoftware.com" to "xxx@tableau.com"

Good to know how you guys use Tableau, thanks everyone!

readonly user does not have read access to all tables. Some of the contents stored in pg_largeobject - readonly user does not have SELECT grant on the one.

Tamas, perhaps you figured this out already...You could signin as tblwgadmin and then do a grant readonly to the tables that you need to have access.