How to get control on reporting sevices security ?
Hi! I'm SQL Server sysadmin and local admin. In reporting services I neither see reports nor able to manage RS security trougt the web browser. How to get control on reporting sevices security ? The following querie : SELECT Users.UserName, Roles.RoleName, Roles.Description FROM Users INNER JOIN PolicyUserRole ON Users.UserID = PolicyUserRole.UserID INNER JOIN Roles ON PolicyUserRole.RoleID = Roles.RoleID Returns : <domain><domain><domain><Domain>\RTCR2ReportReaders </domain></domain></domain><domain><domain><domain>OCS Reports Browser </domain></domain></domain> <domain><domain><domain>BUILTIN\Administrators Content Manager </domain></domain></domain> <domain><domain><domain>NOVABASE\RTCUniversalServerAdmins OCS Reports Content Manager </domain></domain></domain> <domain><domain><domain><domain>\Agile Operaes Browser </domain></domain></domain> <domain><domain><domain>BUILTIN\Administrators System Administrator </domain></domain></domain> <domain><domain><domain>BUILTIN\Administrators Content Manager </domain></domain></domain> <domain><domain><domain>Everyone System User </domain></domain></domain> <domain><domain><domain>Best regards,</domain></domain></domain> <domain><domain><domain>Miguel</domain></domain></domain> 
May 31st, 2012 10:00am

Hi! I'm SQL Server sysadmin and local admin. In reporting services I neither see reports nor able to manage RS security trougt the web browser. What challenges you face to view yours reports in browser? As per my understanding you can manage report security through report manager(web application provided by reporting services) Try to avoid playing with report security with database queries. Thanks, Sandip Shinde(Blog:bi-bigdata.com|Twitter:@CloudBI_Sandip)
Free Windows Admin Tool Kit Click here and download it now
May 31st, 2012 10:10am

What I see is :
May 31st, 2012 11:08am

Hi Lumiga, Reporting Services uses role-based security to grant user access to a report server. For a report server that is configured for native mode, there are two types of roles: Item-level roles are used to view, add, and manage report server content, subscriptions, report processing, and report history. Item-level role assignments are defined on the root node (the Home folder) or on specific folders or items farther down the hierarchy.System-level roles grant access to site-wide operations that are not bound to any specific item. Examples include using Report Builder and using shared schedules. We assign System-level roles by clicking the Site Settings -> Security from the report manager. The two types of roles complement each other and should be used together. In this issue, I suggest that you refer to the troubleshooting steps below: Change the Service Account in Reporting Services Configuration Manager. If the current service account is Network Service, you can change it to a domain\user account and vice versa. This will automatically create a login for the service account in Database Engine. If the issue persists, please re-assign the System-level role and Item-level role on the report manager referring to the articles below: Setting System-Level Permissions on a Report Server Setting Item-Level Permissions on a Report Server If you have any questions, please feel free to let me know. Regards, Mike Yin TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Free Windows Admin Tool Kit Click here and download it now
June 5th, 2012 10:51pm

Hi! Mike, Thanks, your answer was great. Unfortunaly someting is missing in my side: what I did was : - Restore reporting services to a rs database before problem has happen. - Create a local account with admin previlegies named abc. - In reporting service configuration console I changed the domain account the local account abc (sucessfully). - Login in server with local account abc (sucessfully). - In SQL server managment studio I connected to the reporting services (sucessfully). - But the server properties are grey and didn't changed what I see in the browser, I also tried to connect with administartor account and I got the same grey .. - In reporting services configuration console only thing in red is the "web service identity" Any help whould be great, Regards, Lumiga.
June 8th, 2012 11:51am

Hi Lumiga, Thanks for your posting. From your description, the red X indicator next to the Web Service Identity indicates that there is a discrepancy between the actual Web service identity and the Web service identity information that is stored by the Reporting Services WMI provider. This discrepancy can occur if you modify the Web service identity settings in the configuration files. The Web Service Identity page shows the actual Web service identity in ASP.NET Service Account. In some cases, you can synchronize settings by clicking Apply. If that does not resolve the issue, choose a different application pool or click New to create a new application pool for the report server. You must click Apply after you specify the new application pool to save your changes. Regards, Mike Yin TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Free Windows Admin Tool Kit Click here and download it now
June 10th, 2012 5:07am

Hi! Mike I feel that we are closed to the solution... when I create new application I receive the following error:     ReportServicesConfigUI.WMIProvider.WMIProviderException: A virtual directory must first be created before performing this operation. at ReportServicesConfigUI.WMIProvider.RSReportServerAdmin.SetWebServiceIdentity(String applicationPool) Regards, lumiga
June 11th, 2012 10:08am

Hi! Mike, I'm so excited, we are very near from the problem solution. If I give local administrator previleges to the acccut IUSR_SRV109 I can see the reports but is not asked autentication, but is asked the password for the data source. If I remove the local admiminitrator previleges to the account IUSR_SRV109 I get the following error message on SSMS/report/security :   Regards, Lumiga
Free Windows Admin Tool Kit Click here and download it now
June 14th, 2012 12:41pm

Hi! Mike Good news it's up and running. What I did was : - Give local administrator previliges to the account IUSR_SRV109. - Changed the account for service reporting services back to the original account - Restore the database. It's true that now is running, but ie account has high previliges, how to make this working without administrator previliges ?  regards Lumiga
June 15th, 2012 7:16am

Hi Lumiga, Sorry for the delay and thank you for your feedback. From your description, it seems that you add the IUSR account to the Windows administrator group, right? If so, I suggest that you edit the user permission on the Web Site that hosts the report server and report manager virtual directories instead. Please refer to the steps below: Remove the IUSR account from the administrator group.Open IIS manager, right click on the Web Site that hosts the report manager virtual directory and click Edit PermissionsClick Security tab, click Edit, select the IIS_IUSRS and check the Full Control box under Allow column.Click OK. Meanwhile, you can also refer to the following thread which has a similar topic: http://social.msdn.microsoft.com/Forums/en/sqlreportingservices/thread/757f4ed3-1372-4f78-8eea-9d4a863c1c8e Regards, Mike Yin TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Free Windows Admin Tool Kit Click here and download it now
June 15th, 2012 8:30am

Hi! Mike 1. OK 2. I have "Permissions.." not "Edit permissions.." 3. I don't have the account "IIS_IUSRS" Regards lumiga.
June 15th, 2012 12:44pm

Hi Lumiga, Thanks for your posting. Which version of IIS are you using? The steps above are based on IIS7. If you click the Permission option, does it open the Properties window of the websites virtual directory? If so, is there a user group or user name related to IUSR when editing the permissions? If there is, please assign Full Control permission to IUSR and check the result. Regards, Mike Yin TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2012 9:45pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics