---
schema_version: "1"
id: d77a7171c6a999abc308ac7832bbfa7d266e6a85b93768f6342a314c8e39d2dc
title: Impersonation Requirements
collection: tableau
version: next
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/next/en-gb/server-linux/impers_requ.md
canonical_url: https://help.tableau.com/v0.0/server-linux/en-gb/impers_requ.htm
source_site: help.tableau.com
content_type: documentation
content_hash: a8c32d5ab2568f1688113daa0e659e353a80fd52eb717fad83face3d4893d378
description: Understand the requirements for using SQL Server impersonation in Tableau Server.
---
[Skip to main content](#main-content)

# Impersonation Requirements

Here’s what you need to use feature:

- **Live connections to SQL Server only:** Impersonation can only be used for views that have a live connection to a SQL Server database, version 2005 or newer.
- **I**ndividual database accounts:**** Each person who’ll be accessing the view must have an explicit, individual account in the SQL Server database to which the view connects. Members of an Active Directory (AD) group cannot be impersonated. For example, if Jane Smith is a member of the AD group Sales, and her database administrator adds the Sales AD group to the SQL Server database, Jane cannot be impersonated.
- **Matching credentials and authentication type:** The credentials of each Tableau user's account and their Tableau user authentication type must match their credentials and authentication type in the SQL Server database. For example, if Jane Smith’s Tableau Server user account is `MyCo\jsmith`, the username on the SQL Server database must also be `MyCo\jsmith`. SQL Server must be using Windows Integrated Authentication.
- **SQL Server prerequisites:** In SQL Server you should have a data security table, a view that enforces data security, and you should require that your database users use the view.
- **SQL IMPERSONATE account:** You need a SQL Server database account that has IMPERSONATE permission for the above database users. This is either an account with the sysadmin role or one that has been granted IMPERSONATE permission for each individual user account (see the [MSDN article on EXECUTE AS](http://msdn.microsoft.com/en-gb/library/ms181362.aspx)). The SQL Server account must be one of the following:
    
    - The Tableau Server Run As service account. See [Enable Kerberos Service Account Access](https://help.tableau.com/v0.0/server-linux/en-gb/kerberos_runas_linux.htm).
    - The workbook publisher's account. See [Impersonate with Embedded SQL Credentials](https://help.tableau.com/v0.0/server-linux/en-gb/impers_SQL.htm).