# -*- mode: snippet -*-
# name: Server RAU permissions on Windows
# key: qsperw
# --
Please check with your IT/Security team if a GPO or some permissions/local policy settings are restricting access to the registry and folders on the drive where Tableau Server is installed.

To help you with this I have attached our documentation on permissions for the RAU below:

Required Run As Service Account Settings
https://help.tableau.com/current/server/en-us/runas_confirm.htm

This  link contains 3 important subsections: 
+ Verify Folder Permissions 
+ Verify Registry Permissions 
+ Verify the Local Security Policy 

Check all of those subsections together with your IT/Security team, to ensure the permission requirements are correct.

Note that both the "Run as User" (if one was configured) as well as the Windows "Network Service" account need full access to the drive on which Tableau Server was installed and all its sub-folders on every node of Tableau Server. If this is not the case, please proceed as follows:

A.) Add both the "Network Service" and the "Run as User"  user explicitly to the drive, even if they are present within a group already. In order to add the "Network Service" please right click the Tableau installation Drive, select Properties, Navigate to Security tab, click Edit…  and add "NETWORK SERVICE" to the "Group or user names" and give it complete permissions to the install drive. Please do the same for the Tableau Server "Run as User" if he is missing in the list.

B.)  Afterwards please propagate the permissions to all sub-folders on each Tableau Server node:
On the parent folder containing all files you want to take full control of, do the following:
	a. Right Click on the Folder
	b. Select Properties
	c. Navigate to Security tab
	d. Press the Advanced button
	e. Select the newly created Networking Service user
	f. Make sure the user has full control
	g. Make sure "Replace all child object permissions with inheritable permissions from this object is selected"
	h. Click Ok, Ok, and then Ok again to acknowledge.
	i. Please doe the above steps also for the Tableau Server Run as user if not already performed.

Once the permissions have been updated, please reboot the Windows OS completely.

If there is no "run as user" set, please check and make sure the "Network Service" account has access to the instillation drive or at minimum the below folders (example is for default installation location):

   c:\program files\tableau
   c:\programdata\tableau

You'll want to make sure that also the "Network Service" user of Windows has Full access to the full installation drive on each node if the installation a cluster.

If the Run As User Account was changed in any way also see the following documentation to ensure the changes are not breaking Tableau:
http://onlinehelp.tableau.com/current/server/en-us/runas_acct.htm