---
schema_version: "1"
id: 9a045e0cf75af430ce39a6bf76f17b0152a8a811577920a773ce36510d4e4ee6
title: Impersonate with a Run As Service Account
collection: tableau
version: next
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/next/en-gb/server/impers_runas.md
canonical_url: https://help.tableau.com/v0.0/server/en-gb/impers_runas.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 5bac93e7631fcd8b7c20408c32373bce5d14f20e0ff02c080b636c718dca41e2
description: Configure SQL Server impersonation using a Run As service account.
---
[Skip to main content](#main-content)

# Impersonate with a Run As Service Account

Impersonating via a Run As service account is the recommended way to perform impersonation. The Run As service account is an Active Directory user account the Tableau Server service can run under on the machine hosting Tableau Server (see [Run As Service Account](https://help.tableau.com/v0.0/server/en-gb/runas.htm)). This same account must have IMPERSONATE permission for the database user accounts in SQL Server. From a data security standpoint, using the Tableau Server Run As service account for impersonation gives the administrator the most control.

To set up impersonation with a Run As User account:

1. When you configure Tableau Server during installation, select Active Directory as the identity store and specify the user account with IMPERSONATE permission as the Run As service account. See [Configure Initial Node Settings](https://help.tableau.com/v0.0/server/en-gb/config_general.htm).
    
    If you installed Tableau Server with the identity store configured to use Active Directory, then you can set the Run As service account after you have installed. See [Change the Run As Service Account](https://help.tableau.com/v0.0/server/en-gb/runas_acct.htm).
2. Create a workbook in Tableau Desktop. When you create the data connection, select Use Windows NT Integrated security for the workbook's live connection to a SQL Server database:
    
    ![SQL Server Connection configuration window with the option to log on to the server using Windows NT Integrated Security selected.](/tableau/next/en-gb/server/en-gb/Img/impers_runas_nt.png)
3. In Tableau Desktop, publish the workbook to Tableau Server (Server > Publish Workbook).
4. In the Publish dialog box, click Authentication, then in the Authentication dialog box, select Impersonate via server Run As account from the drop-down list:
    
    ![Authentication dialog box with the “Impersonate via server Run As account" option circled.](/tableau/next/en-gb/server/en-gb/Img/impers_runas_publish.png)
5. Click OK.
6. Test the connection by signing into Tableau Server as a user. When you click a view, you should not be prompted for database credentials and you should only see the data the user is authorised to see.