4 Replies Latest reply on Mar 29, 2017 2:20 PM by mark.welsh

    Need to justify admin access to our off-site Server instance

    mark.welsh

      I've been asked to create a list of things that can be done if we are given administrative access to our Tableau Server machine which is hosted by a 3rd party.  Currently, we have no access to the Server per our service agreement with the hosting company, but we're beginning to realize there are a lot of functions we can't perform without it.

       

      My goal is to provide such a comprehensive list that 1). The hosting company would want nothing to do with supporting all of the functions and 2). It's easy to justify pushing for this access within our internal org.

       

      Open to suggestions!  Thanks.

       

      quick edit: I DO have admin access over the Server web view, however I don't have admin access to the actual "machine" Tableau Server lives on.  So, we can't apply updates, etc.  Looking for info on what having admin over the machine can do for us.  Thanks!

        • 1. Re: Need to justify admin access to our off-site Server instance
          Glen Robinson

          Hi Mark

          To do the following list you need to have an admin role

          (List is not going to be comprehensive, as I will have missed somethings)

           

          1. Create Users, and Groups

          2. Add / remove users from Groups

          (If using AD Authentication the above can be done in AD)

          2a. Change User Site Roles and update User Settings

          3. Create / Delete and permission Projects

          4. Create and Manage schedules

          5. Create / Delete Sites

          6. Manage Site settings

          7. Manage Server Settings

          8. View Admin Views

          9. View Server Status Page

          10. Create a zip file of logs (for sending to Tableau Support)

           

          Thats all I can think of right now.

          There will be more

           

          All the best

           

          Glen

          2 of 2 people found this helpful
          • 2. Re: Need to justify admin access to our off-site Server instance
            mark.welsh

            Thanks Glen, but it looks like I may have not been clear enough!  We have admin on the Tableau Server web view, but we don't have admin over the actual "machine" that Server lives on. 

             

            So, we can't (as far as I know) execute tabcmd commands, write queries against the Postgre Tableau Server database, install updates to Server, reboot, etc.

             

            Sorry for the confusion!

            1 of 1 people found this helpful
            • 3. Re: Need to justify admin access to our off-site Server instance
              Glen Robinson

              Hi Mark

              Understand now.

              Having Admin RDP access to the Windows Servers will allow you to do the following

              1. All Windows Admin Stuff (reboot server, checking logs, etc)

              2. Run Tabadmin commands (See full list below)

              tabadmin commands

              Key commands are

                stopping / starting tableau server

                backup / restoring server

                Zipping / Cleaning log files

                Making configuration changes to the Tableau Server

                Setting WDC Whitelists

              3. Upgrade the Tableau Server

               

              However, once the repository (Tableau DB) is open (using Tabadmin dbpass command), the repository can be queried by anyone who knows the credentials (not just admins)

              Also, Tabcmd can be run on any windows PC / Server (not just the Tableau Server itself), and can be run by anyone with credentials (not just admins).

              Installer is found here https://tableau.com/esdalt

               

              Hope this helps

              Glen

              2 of 2 people found this helpful
              • 4. Re: Need to justify admin access to our off-site Server instance
                mark.welsh

                So, tabadmin must be run from Server machine, but tabcmd can be run from elsewhere.  Thanks for the info!