SSRS 2012 and SharePoint 2010 permissions problem
I have SSRS installed in SharePoint mode on my SharePoint server. I've created a report library and uploaded a report. When attempting to view any RS specific screens (Manage Data Sources, Manage Subscribtions, etc), I get the following error: The permissions granted to user 'DOMAIN\user' are insufficient for performing this operation. ---> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'DOMAIN\user' are insufficient for performing this operation. I am a Farm Administrator, Site Collection Administrator and I am a member of the Owners group on the site that the library is inheriting permissions from. Other users that have the same permissions can access the screens, but I can't. The log files aren't much help other than to show exactly which method is failing: w3wp!library!13!06/20/2012-18:12:12:: i INFO: Call to GetPermissionsAction(http://saf-portalXXXX.xxxxxx.com/AQXL/Charts/Prime Contract Action By Agency.rdl). w3wp!library!13!06/20/2012-18:12:12:: i INFO: Call to GetItemTypeAction(http://saf-portalXXXX.xxxxxx.com/AQXL/Charts/Prime Contract Action By Agency.rdl). w3wp!library!13!06/20/2012-18:12:12:: i INFO: Call to GetItemDataSourcesAction(http://saf-portalXXXX.xxxxxx.com/AQXL/Charts/Prime Contract Action By Agency.rdl). w3wp!library!13!06/20/2012-18:12:12:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: , Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'DOMAIN\user' are insufficient for performing this operation.; Has anyone seen this before or know where to look? Most information I can find is SQL 2008 R2 or earlier and not particularly relevant.
June 20th, 2012 6:15pm

Is your site using Claims authentication by any chance? If so, go to the list of All Users in your site. You may see two entries for your user name. One entry is for <DOMAIN>\<USERNAME> (NT account name) and the other entry is for i:0#.w|<DOMAIN>\<USERNAME> (Claims-encoded account name). If this is the case, try deleting the entry for the NT account name and see if that resolves the error. This is actually a known issue, and the current plan is to fix this in SSRS 2012 SP1. Hope that helps.
Free Windows Admin Tool Kit Click here and download it now
June 21st, 2012 12:49am

That fixed it, thanks. I doubt I would have found that on my own.
June 21st, 2012 11:50am

Hi Tristan, I'm seeing this behaviour with a Classic Mode web application as well. I'm using Sharepoint 2010 SP1 and RTM SQL 2012 with SSRS on a separate machine in a 2 server test farm. My user account is Local Admin, Farm Admin and Sysadmin in all SQL instances and yet when I try to manage SSRS in central Admin I get the 'The permissions granted to user 'DOMAIN\USER' are insufficient for performing this operation' error. The SSRS integration with Sharepoint is working correctly because I've published a test report which uses Kerberos delegation to my test site and it works OK - I see my end user credentials being delegated to my backend SQL database so I know that I have constrained delegation and the Claims To Windows Token service correctly configured. I just double-checked my web application and UseClaimsAuthentication is definitely set to False. Regards,http://www.iisadmin.co.uk
Free Windows Admin Tool Kit Click here and download it now
August 23rd, 2012 5:09am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics