Tableau Server supports Kerberos constrained delegation only for data connectors whose ODBC/JDBC drivers are written to accept the forwarded Kerberos ticket. According to Tableau Server Help, the supported connectors are Microsoft SQL Server, SAP HANA, and Teradata. When Kerberos is enabled on Tableau Server and delegation is configured in Active Directory, a viewer’s Kerberos ticket can be forwarded to these three databases so that the database enforces its own row-level security. PostgreSQL’s driver does not accept a delegated ticket; therefore, Kerberos single sign-on to PostgreSQL from Tableau Server is not possible.

B. PostgreSQL – Tableau can use username/password or OAuth, but its driver cannot consume a delegated Kerberos ticket; delegation configuration is not supported.

1. Tableau Server Help “Configure Kerberos Delegation for SSO to Data Sources,” Tableau 2023.3, Section “Supported Connectors” (lists Microsoft SQL Server, SAP HANA, Teradata).

https://help.tableau.com/current/server/en-us/kerberosdelegation.htm

2. Tableau Server Help “Kerberos Database Connections,” 2023.3, Paragraph 2 (states PostgreSQL not supported for delegation).

https://help.tableau.com/current/server/en-us/kerberosdatabase.htm

3. Tableau Whitepaper “Kerberos in Tableau Server,” v2022-01, p. 6-7 (Supported Data Sources table).

4. MIT OpenCourseWare 6.858 Lecture Notes “Kerberos Delegation,” Fall 2020, slide 15 (explains requirement that backend service accept delegated ticket; aligns with Tableau’s list).

In Salesforce report or dashboard subscriptions, recipients can be specified as public groups or roles. Salesforce evaluates the membership of those groups/roles each time the scheduled subscription runs. When a new user is added to the public group, the system automatically includes that user in the next execution of the subscription without any manual action or approval. Therefore, the subscription dynamically updates to reflect the current membership of the group.

A. No approval workflow exists for adding users to an already-subscribed group; inclusion is automatic.

B. The creator doesn’t need to edit the subscription; group membership is re-evaluated automatically.

D. Membership is not frozen at creation time; Salesforce reevaluates the group each run, so new users are included.

1. Salesforce Help, “Subscribe to Reports in Lightning Experience,” section “Add Others” – “If you add or remove users from a public group or role, the changes are reflected the next time the report runs.” (Doc ID: sf.reportssubscribelightning.htm, para 6, accessed 2025-11-28).

2. Salesforce Help, “Subscribe to Dashboards in Lightning Experience,” section “Add Recipients” – “New users added to a subscribed group or role begin receiving the dashboard on the next refresh.” (Doc ID: sf.dashboardssubscribe.htm, para 5).

3. Trailhead (Official Salesforce), “Report and Dashboard Subscriptions,” unit “Subscribe Others” – “When group membership changes, the subscription automatically updates for the next run.” (Trailhead Module URL, accessed 2025-11-28).

The tsm reset command is specifically designed to remove all configurations, content, and user data from a Tableau Server installation, effectively returning it to a pre-initialized state. After this command is executed, the server must be re-initialized. This re-initialization process requires the administrator to configure the server from scratch, which includes the mandatory step of creating a new initial administrator account. This directly addresses the requirement to set up a new administrator account upon the next login/setup attempt.

A. Edit tabsvc.yml: Manually editing the tabsvc.yml file is not the standard procedure for resetting an administrator account and is strongly discouraged unless directed by Tableau Support, as it can cause instability.

C. Run the tsm register command: The tsm register command is used exclusively for managing product keys and the registration of the Tableau Server software. It has no function related to user account management.

D. Reinstall Tableau Server: While a full reinstallation would achieve the goal, it is an unnecessarily drastic and time-consuming solution. The tsm reset command provides a more direct and efficient method to achieve the same outcome.

1. Tableau Server Help - tsm reset: "Use the tsm reset command to remove all configuration and return Tableau Server to the state it was in just after it was installed. ... After you run the tsm reset command, you must run the tsm initialize command..." The initialization process includes creating the initial administrator user.

Source: Tableau Official Documentation, tsm reset, https://help.tableau.com/current/server/en-us/clireset.htm

2. Tableau Server Help - Step 1: Install and Initialize TSM: This document outlines the initial setup process which is triggered after a fresh install or a tsm reset. Step 1.5 describes creating the initial administrator account.

Source: Tableau Official Documentation, Install and Configure Tableau Server, https://help.tableau.com/current/server/en-us/installinstall.htm (See section on initializing TSM).

3. Tableau Server Help - tsm licenses: This documentation details the commands for licensing, including register, confirming its purpose is unrelated to user accounts.

Source: Tableau Official Documentation, tsm licenses, https://help.tableau.com/current/server/en-us/clilicensestsm.htm

4. Tableau Server Help - tabsvc.yml Configuration File: This document explicitly warns against modifying the tabsvc.yml file without guidance from support.

Source: Tableau Official Documentation, Configuration File, https://help.tableau.com/current/server/en-us/configfile.htm

An administrator can create and manage content like groups and projects in Tableau Server through three primary methods. The Tableau Server browser interface is the standard graphical user interface for manual administration. For scripting and automation of administrative tasks, the tabcmd command-line utility provides specific commands such as createproject and creategroup. For more advanced programmatic control and integration with other systems, the Tableau Server REST API offers dedicated endpoints to create and manage projects and groups. These three methods provide comprehensive options for content management.

A. tsm customize: The tsm customize command is part of the Tableau Services Manager (TSM) toolset, which is used for server-level configuration and topology management, not content administration like creating projects or groups.

1. Tableau Server Browser Interface:

Source: Official Tableau Server Help Documentation

Reference: "Add Projects and Move Content" section. The documentation states, "As a server or site administrator, you can create projects... On the top-level Projects page, click New > Project." This confirms the use of the browser interface.

2. tabcmd:

Source: Official Tableau Server Help Documentation

Reference: "tabcmd Commands" page. The documentation lists createproject "projectname" and creategroup "groupname" as valid commands for creating projects and groups respectively via the command-line interface.

3. REST API:

Source: Official Tableau Server REST API Reference

Reference: The "Create Project" method (POST /api/api-version/sites/site-id/projects) and "Create Group" method (POST /api/api-version/sites/site-id/groups) are documented as the standard API calls for programmatically creating these resources.

4. tsm customize (for incorrect option):

Source: Official Tableau Server Help Documentation

Reference: "tsm customize" page. The documentation specifies that this command is used to "Customize the look and feel of the Tableau Server client browser experience," including server name, logo, and sign-in information, confirming it is not for content creation.

Tableau Server is an enterprise-level analytics platform designed for production environments, which requires a server-class operating system for stability, performance, and security. According to the official Tableau Server technical specifications, supported Microsoft Windows operating systems include Windows Server 2016 and Windows Server 2019. Client operating systems such as Windows 7 and Windows 10 are not supported for production installations of Tableau Server. The installer will block installation on these unsupported operating systems.

A. Windows 7 is an end-of-life client operating system and is not supported for Tableau Server installations.

B. Windows 10 is a client operating system and is not supported for production Tableau Server installations.

1. Tableau Help | Tableau Server: All Technical Specifications for Tableau Server on Windows. In the "Hardware and software requirements" section, under "Operating Systems," the documentation explicitly lists "Microsoft Windows Server 2019" and "Microsoft Windows Server 2016" as supported. It does not list any client operating systems. (URL: https://help.tableau.com/current/server/en-us/techspecs.htm)

2. Tableau Help | Tableau Server: Before you install.... This guide outlines the necessary planning steps before installation. In the "Confirm requirements" section, it directs administrators to the Technical Specifications page, which confirms that only server operating systems are supported. (URL: https://help.tableau.com/current/server/en-us/serverpreinstall.htm, Section: "General requirements and recommendations")

The Tableau Server Repository is the primary database for storing all server metadata. It is implemented using a PostgreSQL database. This metadata includes crucial information such as user accounts, groups, permissions, project structures, workbook and data source definitions, and metadata about data extracts. The Repository acts as the central catalog for all assets and configurations on the Tableau Server, enabling the system to manage content and enforce security.

A. Data Engine: The Data Engine (Hyper) is responsible for creating and querying Tableau data extracts (.hyper files). It manages the actual data within extracts, not the server's metadata.

C. Backgrounder: The Backgrounder process executes asynchronous, long-running tasks like extract refreshes, subscriptions, and flow runs. It does not store metadata.

D. File Store: The File Store process manages the physical storage of content files, such as data extracts and workbook revisions, but it is not the metadata database itself.

1. Tableau Server Help (Official Vendor Documentation). "Tableau Server Processes." This document provides a comprehensive overview of all server processes.

Repository: "The Repository is the PostgreSQL database that stores server metadata. This includes information about Tableau Server users, groups and group assignments, permissions, projects, data sources, and workbooks and extract metadata."

Data Engine: "The Data Engine creates, stores and queries data extracts."

Backgrounder: "The Backgrounder runs server tasks, such as extract refreshes, subscriptions, flow runs..."

File Store: "When Tableau Server is configured for external file store, this process is no longer used." (In a default configuration, it "manages the storage of extracts and workbook revisions.")

Reference Location: Tableau Server Help > Administrator Guide > Server Processes.

2. Tableau Server Help (Official Vendor Documentation). "Work with the Tableau Server Repository." This section details the function and structure of the Repository.

Section: "About the Tableau Server Repository"

Content: "The Tableau Server repository is a PostgreSQL database that stores data about all user interactions, extract refreshes, and more." This confirms its role as the central metadata store.

Reference Location: Tableau Server Help > Administrator Guide > Server Management > Administrative Views > Work with the Tableau Server Repository.

To ensure that server tasks run sequentially, or "one-at-a-time," the execution mode must be set to serial. Serial execution processes tasks one after another, where a subsequent task only begins after the preceding one has completed. This is in contrast to parallel execution, where multiple tasks run concurrently. In CRM Analytics, this can be achieved by scheduling jobs to run based on an event, such as the completion of a previous data sync or recipe, effectively creating a serial chain of execution.

B. Set Default priority to 0: Priority influences which job runs first when multiple jobs are queued, but it does not prevent them from running concurrently if resources are available.

C. Set Frequency to Hourly: Frequency determines how often a schedule is initiated (e.g., hourly, daily). It does not control how the tasks within that schedule are executed (serially or in parallel).

D. Set Execution to Parallel: This is the opposite of the requirement. Parallel execution runs multiple tasks simultaneously, not one-at-a-time.

1. Salesforce Help, CRM Analytics Documentation, "Schedule Data Sync and Recipes to Run After Each Other": This document explains the concept of event-based scheduling to create dependencies. It states, "To run a recipe or dataflow after the sync for a specific connection completes, schedule them to run after the connection syncs. You can also chain jobs to run after a recipe or dataflow finishes." This chaining is the mechanism for enforcing serial execution.

2. Salesforce Help, CRM Analytics Documentation, "Schedule, Run, and Monitor Analytics Jobs": This guide details scheduling options. In the context of data sync, it mentions, "To run a connection’s sync jobs one after another, you can schedule them in serial." This directly confirms that "serial" is the correct term for "one-at-a-time" execution.

3. Salesforce Help, CRM Analytics Documentation, "Data Integration Guide", Chapter: Run Data Integration Jobs: This guide discusses job scheduling and dependencies. It notes, "To ensure that a dataflow has the latest data from a particular Salesforce object, run the dataflow after the data sync for that object is complete. You can schedule a dataflow to run after data sync." This describes a practical application of serial execution.

Tableau Server can proactively warm the cache for a workbook after its underlying data extract is refreshed on a schedule. This process, known as pre-computation, improves performance by running queries and storing results before a user requests the view. For this to occur, Tableau Server checks two primary conditions: the workbook must be part of a scheduled extract refresh, and it must be considered relevant based on recent user activity. If a workbook has not been viewed recently, the server will not expend resources to pre-compute its cache, even if its data source is refreshed. Both conditions must be met for the cache warming to be initiated.

A. The publication date of a workbook is not a criterion for cache warming. A heavily used, older workbook is a better candidate for caching than a newly published, unused one.

C. Permissions, such as those for the 'All Users' group, govern access control, not the server's internal logic for performance optimization and cache management.

1. Tableau Server Help, "Configure Workbook Performance after a Scheduled Refresh": This official documentation outlines the specific criteria for warming the cache. It states, "Tableau Server will only warm the cache for a workbook if it meets all of the following criteria:

The workbook has been viewed in the last 30 days.

The workbook is part of a scheduled extract refresh."

This directly supports answers B and D.

2. Tableau Server Help, "Tableau Server Processes": The documentation for the Cache Server process explains its role in storing and managing query caches. It notes that the Backgrounder process can trigger cache warming for recently viewed workbooks after data extract refreshes, reinforcing the link between scheduled tasks (handled by Backgrounder) and recent usage as triggers for caching.

The tsm status -v command is the most direct and comprehensive method for verifying the status of all Tableau Server processes, including each instance within the Coordination Service ensemble. In a high-availability (HA) cluster, the Coordination Service runs on multiple nodes. The verbose (-v) flag provides a detailed, node-by-node status report for every process, allowing an administrator to confirm that the ensemble is fully operational and has achieved quorum. This command-line interface (CLI) tool provides an immediate, real-time health check essential for managing an HA environment.

A. Examine the Tableau Services Manager (TSM) web client Status page

While the TSM web UI does show process status, the tsm status -v command offers a more granular and scriptable output, which is standard for server administration checks.

B. Run the command tsm maintenance ziplogs

This command collects and archives log files for troubleshooting past events. It does not provide the current, real-time operational status of server processes.

D. Examine the Tableau Server Status page

This refers to the legacy administrative views within the Tableau Server UI. The Tableau Services Manager (TSM) is the modern and authoritative tool for managing core service topology and status.

---

1. Tableau Server Help (Official Vendor Documentation). "tsm status". This document explicitly describes the command for checking server status. It states, "tsm status -v Displays the status for Tableau Server. The verbose option shows the status of each individual process." This directly supports using the command to check the Coordination Service.

Source: https://help.tableau.com/current/server/en-us/clistatustsm.htm

2. Tableau Server Help (Official Vendor Documentation). "View Server Process Status". This guide details the methods for monitoring processes. It presents both the TSM web UI and the tsm status -v command as valid options, but highlights the detailed, per-process information provided by the CLI command, which is critical for verifying an ensemble.

Source: https://help.tableau.com/current/server/en-us/adminviewprocessstatus.htm

3. Tableau Server Help (Official Vendor Documentation). "Deploy a Coordination Service Ensemble". This document explains the function of the Coordination Service in an HA deployment. It underscores the importance of maintaining a healthy quorum, the status of which is verified using TSM status commands.

Source: https://help.tableau.com/current/server/en-us/distribhacoord.htm

When content permissions are not locked to the project, Tableau Server uses a delegated administration model. In this model, the user who owns the content (the workbook's owner) has the authority to manage its permissions. Additionally, users assigned the Project Leader role for the project containing the workbook are granted administrative capabilities over all content within that project, which includes setting permissions. This allows for granular control over individual assets by those most familiar with them.

A. Users that have the project and workbook Viewer role: The Viewer role is strictly for consumption. Users with this role can only view published content and have no administrative capabilities, including editing permissions.

B. Users that have the workbook Interactor role: The Interactor role allows users to interact with views (e.g., filter, sort, download data) but does not grant permissions to change the security or access rules for the workbook.

1. Tableau Server Help, "Set Permissions on Individual Content": This document explicitly states, "To set permissions on content, you must be an administrator, or have one of the following user roles: Project Owner, Project Leader, or a content owner." This directly supports that both the workbook's owner (content owner) and the Project Leader can edit permissions.

2. Tableau Server Help, "Projects and Content Permissions": Under the section "Who can set permissions," it clarifies that when permissions are customizable (not locked), "Content owners and project leaders (and administrators) can modify permission rules for their content." This confirms the roles of both the owner and Project Leader in this scenario.

3. Tableau Server Help, "Permissions Capabilities": This reference details the capabilities granted by different roles. It shows that the "Set Permissions" capability is not granted to the Viewer or Interactor site roles by default, reinforcing why options A and B are incorrect.