Yet another 2008 R2 SSRS Permission Issue...
Hello, I really didn't want to post since I've read 1000000000000000000000 posts having similiar issues with their SSRS installations. I have a pre-existing install of SSRS 2008 R2 and am able to access http://myserver/reports or http://myserver/reportserver without issue. I can access the site settings and folder settings and add users/groups to them, but the permissions never seem to take effect. I've published a report to the report server using BIDS 2008 R2 and the report runs just fine for my administrator account, and all other users who have admin access to the SSRS box. The problem that comes into play is assigning permissions to users who are not local administrators on the SSRS box. They cannot run or access any of the reports and always receive the infamous error: User 'DOMAIN\ryantest' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed. This account is my test account. It has 2 group memberships - domain users and SSRS_Report_Users. The SSRS_Report_Users group is what I granted rights to the SSRS site in 2 places. First I went into site settings and added this group in as "System User" access. Then I went onto the folder for my report "DBAData_LinkedServers" and added this group into the "Browser" role. When accessing the URL http://myserver/reports i get this error no matter what I do, unless I make the test account a local administrator on the SSRS box. I've changed out the DOMAIN\SSRS_Report_Users group and put DOMAIN\RyanTest into both the "System Users" on the site settings page, as well as the "Browser" role on the folder containing my reports. I've also tried to configure a custom role in Reporting services and then added the group into it as well, and that does not work. The *ONLY* way I can get the user to gain access to the SSRS site and reports, is to make them local admin on that server. The server is running Windows server 2008 R2 Standard (NO Service Pack) and SQL Server 2008 R2 Standard (NO Service pack). I'd really like to get the reports accessible to users on my domain, but I do not want to make all the groups local administrators on the SSRS server itself. Is there anything I can do to fix it? I tried changing IE zone security settings and running IE on the client machine as administrator (ryantest is admin on the client machine) but this doesn't appear help either. The second I make the account a member of the local administrator group on the SSRS server, everything just works as expected. Thank you for any suggestions, -Ryan
September 9th, 2011 6:13pm

Hi Ryan, In your case, I suggest you that try to refer to the steps in the following thread: http://social.msdn.microsoft.com/Forums/en-US/sqlexpress/thread/9b5a8763-84ce-46d0-b011-067ad39223d1/ Each user who requires access to a Report Server must have at least one item-level role assignment. You can try to define role assignments on the root folder(Home page), the users can use permission inheritance to allow the same level of access for all items that are stored on the server. For more information, please see: • Grant User Access to a Report Server (Report Manager) • Configure a Report Server for Local Administration on Windows Vista and Windows Server 2008 (UAC) Thanks, Bin Long TechNet Subscriber Supportin forum If you have any feedback on our support, please contact tnmff@microsoft.comPlease remember to mark the replies as answers if they help and unmark them if they provide no help.
Free Windows Admin Tool Kit Click here and download it now
September 11th, 2011 9:53pm

Thanks for the reply Bin. I installed SP1 on the instance which didn't help. I read through the links you posted (some for the second or third time even) and finally I found what was wrong. On the SSRS site there is a link at top labeled "home" I did not realize that the site settings link does not set permissions on it. I had to click the "folder settings" link and set the permission there. I had overlooked it since I set the site wide system user settings and the individual folder settings, and thought that the site wide system user settings was what people were talking about setting permissions on the root/home folder. I attached a .png file with the link that I had to click on after I clicked "Home" to get it working. Thank you for your help. A weekend of not looking at it and your summaries got me going first thing this morning! -Ryan
September 12th, 2011 5:57pm

Hi Ryan, Thank you SO much for posting this, it was driving me crazy as well. Very helpful post, & I've marked as such. Thanks again, Yann Yann - LightSwitch Central - Click here for FREE Themes, Controls, Types and Commands If you find a reply helpful, please click "Vote as Helpful", if a reply answers your question, please click "Mark as Answer" By doing this you'll help people find answers faster.
Free Windows Admin Tool Kit Click here and download it now
May 14th, 2012 9:33pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics