--- schema_version: "1" id: 6d4de2d8b2096888df140341d7913b80f21a3b4b6c20a3b5e2b95052b4338ae4 title: RMT Default Installation Permissions collection: tableau version: current locale: en-gb portal_url: https://docs.salesforce.com/tableau/current/en-gb/server-linux/rmt-install-perms.md canonical_url: https://help.tableau.com/current/server-linux/en-gb/rmt-install-perms.htm source_site: help.tableau.com content_type: documentation content_hash: c7e2633e6ac61dc320fc8b42e092bd7120151c71cff8c9d8f59bde57ff381c66 description: Understand default installation permissions for the Resource Monitoring Tool. --- [Skip to main content](#main-content) # Default Installation Permissions – Tableau Resource Monitoring Tool The following topic provides the default permissions set on various system accounts or groups during installation. If your environment or organisation requires you to use non-default accounts, this helps you determine what permissions are necessary for Resource Monitoring Tool (RMT) to function properly. **Note:** Resource Monitoring Tool (RMT) server and agent are not Federal Information Processing Standard (FIPS) 140-2 compliant and will not function properly on operating systems running with FIPS mode enabled. ## Windows installations By default, Tableau Resource Monitoring Tool creates these accounts when installed: - NT SERVICE\\TableauResourceMonitoringTool - NT SERVICE\\TableauResourceMonitoringToolPostgreSQL - NT SERVICE\\TableauResourceMonitoringToolRabbitMQ If you want or need to use other accounts in place of the default accounts, you can specify these after installation using the `rmt-admin` command line utility. For details, see [rmtadmin Command Line Utility](https://help.tableau.com/current/server-linux/en-gb/rmt-admin-cmdline.htm#rmtadmin-service-setup). The permissions used by these default service accounts are shown below, as well as the minimum required permissions. Your service accounts should match the minimum permissions or the default permissions:

Service Account	Resource	Default permissions	Required minimum permissions
Tableau Resource Monitoring Tool Master
	Application files `Tableau Resource Monitoring Tool\master`	Full control: read, write, execute, modify	Full control
	Log directories and files `Tableau Resource Monitoring Tool\master\logs`	Full control: read, write, execute, modify	Read, write
	Configuration directory `Tableau Resource Monitoring Tool\master\config`	Full control: read, write, execute, modify	Full control

Tableau Resource Monitoring Tool PostgreSQL
	Application directory `Tableau Resource Monitoring Tool\prerequisites\postgresql<nn>`	Full control: read, write, execute, modify	Full control
	Data directory `Tableau Resource Monitoring Tool\data\postgresql<nn>`	Full control: read, write, execute, modify	Full control
	Logs directory `Tableau\Tableau Resource Monitoring Tool\master\logs\pgsql`	Full control: read, write, execute, modify	Read, write.

Tableau Resource Monitoring Tool RabbitMQ
	Data directory `Tableau Resource Monitoring Tool\data\rabbitmq`	Full control: read, write, execute, modify	Full control
	Application files `Tableau Resource Monitoring Tool\prerequisites\rabbitmq` `Tableau Resource Monitoring Tool\prerequisites\erlang`	Full control: read, write, execute, modify	Full control
	Log files `Tableau Resource Monitoring Tool\master\logs\rabbitmq`	Full control: read, write, execute, modify	Read, write

Tableau Resource Monitoring Tool Agent
	Application files `Tableau Resource Monitoring Tool\agent`	Full control: read, write, execute, modify	Full control
	Log directory and files `Tableau Resource Monitoring Tool\agent\logs`	Full control: read, write, execute, modify	Read
	Configuration directory `Tableau Resource Monitoring Tool\agent\config`	Full control: read, write, execute, modify	Full control

## Linux installations By default Tableau Resource Monitoring Tool creates certain accounts when installed. If you want or need to use groups and users in place of the defaults, you can specify these after installation using the `rmt-admin` command line utility. For details, see [rmtadmin Command Line Utility](https://help.tableau.com/current/server-linux/en-gb/rmt-admin-cmdline.htm#rmtadmin-service-setup). The default permissions used by these service accounts are shown below. Your permissions should match these permissions:

Service Account	Resource	permissions
Tableau Resource Monitoring Tool Master
	Application files `/var/opt/tableau/tabrmt/master`	Owner – Full permissions (read, write, execute) Group – read, write, execute Others – read, execute
	Log directories and files `/var/opt/tableau/tabrmt/master/logs`	Owner – Full permissions (read, write, execute) Group – read, write, execute Others – read, execute
	Configuration directory `/var/opt/tableau/tabrmt/master/config`	Owner – Full permissions (read, write, execute) Group – read, write, execute Others – read, execute

Tableau Resource Monitoring Tool PostgreSQL
	Application directory `/opt/tableau/tabrmt/prerequisites/postgresql13`	Owner – Full permissions (read, write, execute) Group – read, execute Others – read, execute
	Service directory `/var/opt/tableau/tabrmt/data/postgresql13/pg_*`	Owner – Full permissions (read, write, execute) Group – none Others – none
	Data directory `/var/opt/tableau/tabrmt/data/postgresql13/`	Owner – Full permissions (read, write, execute) Group – read, write, execute Others – read, execute
	Logs directory `/var/opt/tableau/tabrmt/master/logs/pgsql`	Owner – Full permissions (read, write, execute) Group – read, write, execute Others – execute
	Other directories under the PostgreSQL directory not mentioned above `/var/opt/tableau/tabrmt/data/postgresql13/<not mentioned above>`	Owner – read, write Group – none Others – none
	`/var/opt/tableau/tabrmt/data/postgresql13/base` `/var/opt/tableau/tabrmt/data/postgresql13/global`	Owner – Full permissions (read, write, execute) Group – none Others – none
	`/var/opt/tableau/tabrmt/data/postgresql13/certificates`	Owner – Full permissions (read, write, execute) Group – Full permissions (read, write, execute) Others – execute

Tableau Resource Monitoring Tool RabbitMQ
	Data directory `/var/opt/tableau/tabrmt/data/rabbitmq`	Owner – Full permissions (read, write, execute) Group – read, write and execute Others – read, execute
	Application files `/var/opt/tableau/tabrmt/rabbitmq/prerequisites/rabbitmq` `/var/opt/tableau/tabrmt/rabbitmq/prerequisites/erlang`	Owner – Full permissions (read, write, execute) Group – read, execute Others – read, execute
	Log files `/var/opt/tableau/tabrmt/master/logs/rabbitmq`	Owner – Full permissions (read, write, execute) Group – read, write and execute Others – execute
	Other directories (under `/rabbitmq` directory) `/var/opt/tableau/tabrmt/data/rabbitmq/certificates` `/var/opt/tableau/tabrmt/data/rabbitmq/mnesia`	Owner – Full permissions (read, write, execute) Group – read, write and execute Others – execute
	`/var/opt/tableau/tabrmt/data/rabbitmq/<other than mentioned>`	Owner – read, execute Group – read, execute Others – none

Tableau Resource Monitoring Tool Agent
	Application files `/var/opt/tableau/tabrmt/agent`	Owner – Full permissions (read, write, execute) Group – read, write and execute Others – read, execute
	Log directory and files `/var/opt/tableau/tabrmt/agent/logs`	Owner – Full permissions (read, write, execute) Group – read, write and execute Others – read, execute
	Configuration directory `/var/opt/tableau/tabrmt/agent/config`	Owner – Full permissions (read, write, execute) Group – read, write and execute Others – read, execute

### Who can do this To do all the steps described above you need be an admin on the machine that you are installing Resource Monitoring Tool, and be a Tableau Server Administrator.