---
schema_version: "1"
id: 5e7ceea12a4cfc3618c5dd725dae71cc59bdefd716b4bbeffee1c711467fc5ab
title: Required Run As Service Account Settings
collection: tableau
version: next
locale: en-us
portal_url: https://docs.salesforce.com/tableau/next/en-us/server/runas_confirm.md
canonical_url: https://help.tableau.com/v0.0/server/en-us/runas_confirm.htm
source_site: help.tableau.com
content_type: documentation
content_hash: c49709926e4ff08b5d6bc870f5b365052c872e0370771b5c17eae8ace3c36f08
description: Understand the required settings and permissions for the Run As service account.
---
[Skip to main content](#main-content)

# Required Run As Service Account Settings

The Run As service account needs permissions that allows it to modify files and registry settings. In addition, because the Run As service account is used as the security context for the Tableau Server Application Manager service (tabsvc), the account must also be given rights to log on as a service.

These permissions are set automatically when you update the Run As service account in Tableau Server Configuration as described in the topic, [Change the Run As Service Account](https://help.tableau.com/v0.0/server/en-us/runas_acct.htm).

If you have changed the Run As service account, then we recommend revoking the permissions for the previous account. See [Revoke Run As Service Account Permissions](https://help.tableau.com/v0.0/server/en-us/runas_change.htm).

The account you use for the Run As service account should not be a member of the Local Administrators or Domain Administrators account. Instead we recommend using a domain user account that is not an administrator for the Run As service account. Using a domain account that is not a member of these administrator groups is a good security practice and can help avoid access to certain data sources and folders. For information on best practices when creating a Run As service account, see [Creating the Run As service account](https://help.tableau.com/v0.0/server/en-us/runas_acct.htm#best).

If you have recently changed Run As service account or are getting permission errors, use this section to confirm that Tableau Server meets the permission requirements that are detailed here. If you're running a distributed installation, all Run As service account permission configurations must be the same across all nodes.

**Note:** Do not hide the files created by the Tableau Server installer.

## Other articles in this section