Hey Stuart -
Impersonation in Tableau Server is not something that actually works "automagically" - a Tableau Server administrator needs to do configuration work to make it happen. Do you know if this work was done? If so, which technique is being used?
I understand that and I am the tableau admin (although clearly very inexperienced) - I thought everything was in place for impersonation to work anyway. Certainly if I create a workbook that accesses an underlying remote sql server db and then publish that workbook to our server then users who have access to that db are able to run the report without problem. The difference here is that there are two dbs in the mix.
OK, are you using the "legacy" mechanism to do what I'd call "poor man's impersonation", ala - SQL Server Impersonation?
If so, did you grant IMPERSONATE permission in both databases? Try a more simple question which simply uses each database one at a time (vs. both at the same time). Does it work one at a time but not together?
If you're using Kerberos delegation, it should "just work" assuming the user in question has permissions on both dbs...
Hi - when I access data separately on both dbs then the published reports appear fine. It's only when the data is going through the intermediary one. My understanding is that everything is kerberos.