---
schema_version: "1"
id: 2668cc8b61794f3f1a2997eefd938baa2ebca491a9c29f72384679c2e9635355
title: Impersonate with a Run As Service Account
collection: tableau
version: current
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/current/en-gb/server/impers_runas.md
canonical_url: https://help.tableau.com/current/server/en-gb/impers_runas.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 3360ebc2de30bc5aa38d82906117abd6085a10bdc5dc9637c9cec91a29c0ae03
description: Configure SQL Server impersonation using a Run As service account.
---
[Skip to main content](#main-content)

# Impersonate with a Run As Service Account

Impersonating via a Run As service account is the recommended way to perform impersonation. The Run As service account is an Active Directory user account the Tableau Server service can run under on the machine hosting Tableau Server (see [Run As Service Account](https://help.tableau.com/current/server/en-gb/runas.htm)). This same account must have IMPERSONATE permission for the database user accounts in SQL Server. From a data security standpoint, using the Tableau Server Run As service account for impersonation gives the administrator the most control.

To set up impersonation with a Run As User account:

1. When you configure Tableau Server during installation, select Active Directory as the identity store and specify the user account with IMPERSONATE permission as the Run As service account. See [Configure Initial Node Settings](https://help.tableau.com/current/server/en-gb/config_general.htm).
    
    If you installed Tableau Server with the identity store configured to use Active Directory, then you can set the Run As service account after you have installed. See [Change the Run As Service Account](https://help.tableau.com/current/server/en-gb/runas_acct.htm).
2. Create a workbook in Tableau Desktop. When you create the data connection, select Use Windows NT Integrated security for the workbook's live connection to a SQL Server database:
    
    ![SQL Server Connection configuration window with the option to log on to the server using Windows NT Integrated Security selected.](/tableau/current/en-gb/server/en-gb/Img/impers_runas_nt.png)
3. In Tableau Desktop, publish the workbook to Tableau Server (Server > Publish Workbook).
4. In the Publish dialog box, click Authentication, then in the Authentication dialog box, select Impersonate via server Run As account from the drop-down list:
    
    ![Authentication dialog box with the “Impersonate via server Run As account" option circled.](/tableau/current/en-gb/server/en-gb/Img/impers_runas_publish.png)
5. Click OK.
6. Test the connection by signing into Tableau Server as a user. When you click a view, you should not be prompted for database credentials and you should only see the data the user is authorised to see.