Cannot access Report Server (rsAccessDenied)?
I'm running SSRS 2008 on Windows Server 2008 (Internet Explorer IS8) Problem #1 I can get to http://<servername>/reports...but without any ability to configure roles..all I see at the top right is "Home", "My Subscriptions", and "Help". I don't see the admin section. Problem #2 I can't view http://<servername>/reportserver page at all, even if I'm a local administrator I get the common error everyone's gotten before: "Reporting Services Error" "The Permissions granted to user 'domainname\myusernamehere' are insufficient for performing this operation. (rsAccessDenied) Following are my observations, 1) All SQL Services are running under my local username (myusername) 2) When I open Management Studio, Under Security-->Users-->myusername-->properties, in USERMAPPING tab in "User Mapped To this login" I see ReportServer and ReportServerTempDb but when I cleck on each of them I do not see RsExecRole assigned to it. Also in the same section, DBO user is used as user and Loginname. 3) When I visit Reportserver-->Security-->Users-->DBO-->Properties DBO user is mapped to "myusername" (local OS user), but this DBO user is not member of RSExecRole database role. 4) When I visit Reportserver-->Security-->Users-->DBO-->Properties DBO user is mapped to "myusername" (local OS user), but this DBO user is not member of RSExecRole database role. What I need to do in order to access reportserver with complete privileges?
June 22nd, 2011 11:28pm

Hi, Please launch Internet Explorer as administrator(right click and select "run as administrator") and open your Report Manager site(http://<servername>/reports). Please let us know if you run into any issues.
Free Windows Admin Tool Kit Click here and download it now
June 23rd, 2011 1:42pm

Hi MeetP, Thanks for your question and Shahfaisal’s reply. According to the descrition ,based on my research and experiences, may be the issue happens when the browser passed the credential to the report server. On a report server that is configured for Negotiate or Kerberos authentication, a client connection to the report server will fail if there is a Kerberos authentication error. Since your current account is a local account not a windows domain account, so we can ignore the reason of didn’t register a Service Principle Name (SPN) for the account. The possible reason may be the report server is configured with the RSWindowsNegotiate setting, and the browser chooses Kerberos over NTLM in the authentication header in the request it sends to the report server. So please remove the < RSWindowsNegotiate /> from the rsreportserver.config configuration file and reattempt the connection to confirm. For more information, please see: Resolving Kerberos Authentication Errors When Connecting to a Report Server: http://msdn.microsoft.com/en-us/library/cc281253.aspx#proxyfirewallRSWindowsNegotiate. Hope it helps you, if your issue still exists, please feel free to let me know. Thanks, Sharp Wang Best Regards. Sharp Wang
June 24th, 2011 7:19am

Hi Meet P, follow below steps to resolve the issue it worked for me Control Panel --> User Accounts --> User Accounts --> Change User Account Control Settings and set the notification status bar to "Never Notify". Thanks, Pushkar
Free Windows Admin Tool Kit Click here and download it now
June 24th, 2011 7:38am

Sharp Wang, Thank you for your reply. I checked rsreportserver.config file and < RSWindowsNegotiate /> code segment is not present in the file. When I searched for authentication related code in the file, I found following code segment, <AuthenticatonTypes> <RSWindowsNTLM /> </AuthenticatonTypes>
July 12th, 2011 12:14pm

Pushkar, I tried your suggestion, but the Report Server (rsAccessDenied) exception is still present.
Free Windows Admin Tool Kit Click here and download it now
July 12th, 2011 12:16pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics