SQL 2008 R2 Reporting Services I have create a Group A Report Users group and a Group A Report Admins group. To the folder containing the reports for Group A, I have granted Browser role to the Group A Report Users group. I have granted Browser, Content Manager, Publisher, and Report Building roles to the Group A Report Admins. Everyone (members of both groups) can view the reports, just like the should. However, the two peope in the Administrator's group, get an rsAccessDenied if they use the pull-down for the report and select 'Manage'. What permissions am I missing? Its got to be somewhere other that the roles for this folder because it works for me, and I have all the same roles assigned to my user account.

Hi JT65, Reporting Services uses role-based security to grant user access to a report server. There are two types of roles: · Item-level roles are used to view, add, and manage report server content, subscriptions, report processing, and report history. · System-level roles grant access to site-wide operations that are not bound to any specific item. Examples include using Report Builder and using shared schedules. · Generally, if you define role assignments on the root folder(Home), you can use permission inheritance to allow the same level of access for all items that are stored on the server. However, this inheritance can be broken by grant permissions to specific items that are located in subfolders in the Report Server folder hierarchy. So, I was wondering, the inheritance for the report you had intended to “manage” might have been broken and you had not granted permissions to that 2 users in the Administrator’s group manually on the specific item. To setting permissions on specific items, please see: http://msdn.microsoft.com/en-us/library/aa337494.aspx Thanks, Lola

I did not assign system level roles because I didn't want these people wandering outside of their own area...even if all they can do is browse. I assigned the permissions I thought I needed to the subfolder. I've checked one of the reports in question, and I see that these roles have been inherited all the way down to the actual report. So, the Group A Report Admins has the Browser, Content Manager, Publisher, and Report Building roles on the report. Why can't they manage it?

I have the same problem as JT65. I have been given several roles in to one folder on the report manager: Browser, Content Manager, My Reports, Publisher, Report Builder. I can view and run reports in the folder. I can download and upload report files. But I can't view the properties for the folder or any reports in it. When I try, I get "The permissions granted to user 'DOM\[my name]' are insufficient for performing this operation. (rsAccessDenied)". I do not have any roles on the root folder. I do not have system-level roles. Is that what I'm missing? --Danny

Mystery solved: I was given Browser role to the root folder, the parent of the folder where my reports are, and now I can manage my items.