Error "The call to the function LsaLogonUser failed" When Viewing Workbooks with Kerberos Delegation

Published: 07 Apr 2015
Last Modified Date: 08 Feb 2017


After publishing a MS SQL Server or MSAS-based workbook to Tableau Server with Viewer Credentials, the following error occurs when attempting to load the view:

com.tableausoftware.nativeapi.dll.TableauException: The call to the function LsaLogonUser failed.
Unable to connect to the server. Check that the server is running and that you have access privileges to the requested database.
Errors occurred while trying to load the workbook "<workbook>". The load was not able to complete successfully.


  • Tableau Server 8.3 and newer
  • MSAS or MS SQL Server
  • Kerberos


  • Work with your Active Directory Domain Administrator to ensure that the Tableau Server Run As User has permissions to read the client object of the Active Directory User accessing the workbook.
  • If the users affected are in a different domain, verify they are logging on using the domain nickname configured in Tableau and/or update the domain nickname.


The issue might occur because of the following reason:
  • The Tableau Server Run As user account does not have permissions in Active Directory to read the workbook user's client object.
  • The domain nickname configured in Tableau does not match what the user is logging on with.
Did this article resolve the issue?