"tsm maintenance cleanup -a" Not Working as Expected when Tableau Server is Stopped

Published: 15 Sep 2022
Last Modified Date: 15 Sep 2022


Running tsm maintenance cleanup -a with the Tableau Server stopped and the Run As Service (RAS) is not in the local administrators group, results in users being unable to download/export content once the server is running again.



  • Tableau Server 2020.4 and newer
  • Windows Server 2016


This issue has been resolved under ID 1422694 scheduled for a future release.


  • Use "tsm pending-changes apply" before the tsm start.
  • Do not use "cleanup -a" or "cleanup -t" or "cleanup" without arguments.  Be sure to specify which other details need to be cleaned up using the exact command flags.
  • Reboot the hosts after cleanup and before the tsm start.


The cleanup command removes the Run As Service account from permissions on the Vizportal temp directory so that the gateway cannot access it.

Additional Information

  • Gateway's error.log has a line similar to the one below when the issue occurs:
    • [Mon May 02 17:14:58.xxxxxx 2022] [:error] [pid 28176:tid 9260] (OS 5)Access is denied.  : [client] xsendfile: cannot open file: E:/tableau/data/tabsvc/temp/vizportal_0.20213.22.0108.1051/xxxXXX.tdsx, referer: https://...
Did this article resolve the issue?