---
schema_version: "1"
id: be841bb458afd1ff2ca21a67ddb420745c9db57b0013aa6ad09f5127ce67cc45
title: Impersonation Requirements
collection: tableau
version: next
locale: en-us
portal_url: https://docs.salesforce.com/tableau/next/en-us/server-linux/impers_requ.md
canonical_url: https://help.tableau.com/v0.0/server-linux/en-us/impers_requ.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 0bf38d94ec89d0fbc8965b41433679d0fe461ee2c832c590b8dfafcfd1035098
description: Understand the requirements for using SQL Server impersonation in Tableau Server.
---
[Skip to main content](#main-content)

# Impersonation Requirements

Here’s what you need to use feature:

- **Live connections to SQL Server only:** Impersonation can only be used for views that have a live connection to a SQL Server database, version 2005 or newer.
- **Individual database accounts:** Each person who’ll be accessing the view must have an explicit, individual account in the SQL Server database to which the view connects. Members of an Active Directory (AD) group cannot be impersonated. For example, if Jane Smith is a member of the AD group Sales, and her database administrator adds the Sales AD group to the SQL Server database, Jane cannot be impersonated.
- **Matching credentials and authentication type:** The credentials of each Tableau user's account and their Tableau user authentication type must match their credentials and authentication type in the SQL Server database. For example, if Jane Smith’s Tableau Server user account is `MyCo\jsmith`, the username on the SQL Server database must also be `MyCo\jsmith`. SQL Server must be using Windows Integrated Authentication.
- **SQL Server prerequisites:** In SQL Server you should have a data security table, a view that enforces data security, and you should require that your database users use the view.
- **SQL IMPERSONATE account:** You need a SQL Server database account that has IMPERSONATE permission for the above database users. This is either an account with the sysadmin role or one that has been granted IMPERSONATE permission for each individual user account (see the [MSDN article on EXECUTE AS](http://msdn.microsoft.com/en-us/library/ms181362.aspx)). The SQL Server account must be one of the following:
    
    - The Tableau Server Run As service account. See [Enable Kerberos Service Account Access](https://help.tableau.com/v0.0/server-linux/en-us/kerberos_runas_linux.htm).
    - The workbook publisher's account. See [Impersonate with Embedded SQL Credentials](https://help.tableau.com/v0.0/server-linux/en-us/impers_SQL.htm).