After installing SSAS, using the tabular model, you receive the error “The service cannot be started: The following system error occurred: A required privilege is not held by the client.” when trying to start the service.
Examining //msdn.microsoft.com/en-us/library/ms175371.aspx shows that the only security privilege needed for the SSAS service account is the “Log on as a service” privilege.
Alas, this is not accurate. When running in the tabular model mode, the service account also needs the “Increase a process working set” privilege.
In Windows, under a default installation, the local group “Users” has this privilege (which would allow any user on the system to have this privilege) as seen below:
However, many companies will lock down the security policies and remove this privilege. This is apparently a problem because there are a lot of requests on the internet for this issue. The advice generally given is to just run SSAS as an administrator – which is not a good choice, and may not be an option in your company. Now there is a solution.
I’ve filed a connect item to correct the documentation at //connect.microsoft.com/SQLServer/feedback/details/869677/ssas-privileges-incorrectly-specified – please consider going out there and voting for it.
The SQL 2014 doc now says
Tabular mode instances have an additional requirement of Increase a process working set (SeIncreaseWorkingSetPrivilege) privilege on the service account. This privilege is available to all users by default. However, if it is missing, the service might fail to start, logging this error: “A required privilege is not held by the client.”
Reply
Sweet. Connect items really can work sometimes!
Reply
The SQL 2014 content has been updated a while ago, but the switch to default the msdn pages to show SQL 2014 just happened last week I suspect. The SQL 2012 MSDN pages are staggered, but will updated soon.
I actually couldn’t find the Connect item at all. Do you still see it when you click the link?
Also, in case you can fix this, from SQL Server Central’s embed of this blog post, all links give this Forbidden error.
//www.sqlservercentral.com/blogs/discussionofsqlserver/2014/05/13/cannot-start-ssas-after-install-in-tabular-mode/
{
Forbidden
You don’t have permission to access /wayne/ on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
}
Reply
I’m pretty sure that I was looking at the 2014 page – but with the changes, I can’t be sure.
Regarding the connect item: it seems that somehow I made it private, so that only me and MS can see it. Whoops. I’ll have to pay attention to this in the future.
Reply