---
schema_version: "1"
id: 87a7b96d53842dd0cf0cf96dee6d7c6eae398a902e8692917cc167278bba57bd
title: Configure a Custom TSM Administration Group
collection: tableau
version: next
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/next/en-gb/server/security_tsm_admin_group.md
canonical_url: https://help.tableau.com/v0.0/server/en-gb/security_tsm_admin_group.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 30cec0ef645ada9c98959856c43a7ecabf6d4e16a3ea9dfba33de3b5582e9570
description: Configure a custom TSM administration group on Tableau Server.
---
[Skip to main content](#main-content)

# Configure a Custom TSM Administration Group

This topic describes how to configure a custom TSM administration group.

By default, the user account used for TSM administration must be a member of the Administrators group on the computer running Tableau Server. In some organisations, security policy requires separation between administrative roles. In these scenarios, the default TSM administration configuration is not allowed.

You can configure Tableau Server to use an arbitrary group as a custom TSM administration group. Once configured, any user that is a member of the custom group will be able to administer TSM.

Users in the default Windows Administrators group will still have full access to TSM.

## Step 1: Create the new group

You can create a local Windows group or a group in Active Directory. We recommend creating a group with default settings. Do not apply or remove permissions from the default group as created by Windows.

**Note**: The default TSM group name is `tsmadmin`. If you create the Windows group with the name, `tsmadmin`, then no further configuration on Tableau Server is required.

## Step 2: Configure Tableau Server

The custom TSM administration group name is stored in the `tsm.authorized.groups` configuration key. If you want to specify a group name (other than `tsmadmin`) then you will need to update the `tsm.authorized.groups` configuration key and then restart Tableau Server.

Use the tsm configuration set command to set the group name value. For example, to change the TSM administrative group name to `myadmingroup`, run the following commands:

tsm configuration set -k tsm.authorized.groups -v myadmingroup

tsm pending-changes apply

**Notes**

- Setting the `tsm.authorized.groups` configuration key overwrites any existing value stored on that key.
- You can specify multiple groups by entering a comma-separated list of group names as the value.

## Step 3: Add users to the new group

After you finished setting `tsm.authorized.groups`, any user in the new group(s) that you have specified will have full TSM administrative rights on Tableau Server.