Have set up access to certain reports based on security settings in sccm so accounts in specific AD group can access certain sccm reports via ssrs reporting web site.  Utilized the very useful information in the links below.  I have a request for the group to access the network folder reports, but that means I would have to give RUN REPORT perms to the SITE permission in the security role, as that is the only group that includes the network folder.  I don't want to give them access to the rest of the stuff it includes, such as client push, client status, replication traffic, etc., as that would just cause confusion among the customer base.  I don't want to give them anymore than they need.  I tried giving the group rights to the individual reports in the network folder, but the problem is that since there is no access to the folder itself without doing the above, they can't get to the reports.  I could give them rights to the folder via SSRS but then SCCM would just overwrite that 15 minutes later.  Does anyone have any suggestions on this one?  Thanks.  : )

http://skamie.wordpress.com/2010/06/24/ssrs-and-uac/

http://blog.coretech.dk/kea/creating-the-reporting-user-role-in-configmgr-2012/

http://social.technet.microsoft.com/Forums/en-US/configmanagergeneral/thread/8525cfa6-aaa4-4d34-a296-a9a8cb76e5a3/

So it is unclear to me, why can't you just give them the run report security permission? Why do you think it will give them more rights?

I'm not concerned about giving them more rights, I'm concerned about giving them access to reports that they don't need access to, otherwise there would be widespread confusion and misunderstanding.  This, in turn, would generate anxiety-based calls to the support desks, that I would like to avoid.  I'm not trying to hide anything from them, I just don't want to cause undue worry and confusion.  Make sense?

I'm not concerned about giving them more rights, I'm concerned about giving them access to reports that they don't need access to, otherwise there would be widespread confusion and misunderstanding.  This, in turn, would generate anxiety-based calls to the support desks, that I would like to avoid.  I'm not trying to hide anything from them, I just don't want to cause undue worry and confusion.  Make sense?

So don't give them access to reports that you don't want them to have. Here is a blog that will tell you how to grant access to one report.

http://be.enhansoft.com/post/2013/11/07/How-to-Grant-Permission-to-a-Single-SCCM-2012-SSRS-Report.aspx

I basically did all that before submitting the question with the exception of giving them a link directly to the report(s).  There will be a whole group of people accessing the reports.  I am thinking of just making a copy of all of them (6 reports) and putting them into a folder they can access.  They are static reports, outside of one of them requesting a computer name for the query and that way they can get the info as needed.  My sticking point was how to grant them access to the folder that contained the reports, as the way I would normally do it would open up a whole bunch of reports that they don't need to concern themselves with.  It looks like my only option is to open up access to other reports or to copy the group of reports to a location they can access.  Thank you for sending along the information.

Are these custom reports or built-in reports? if they are the built-in reports then you should edit the reports to remove the dill down links too.

They are actually the reports in the network folder (built-in).  I just want to be able to get perms to the network folder but what I have tried isn't going to work since sccm rbac perms override ssrs perms.

I haven't had time to look at this but you should be able to setup the permission to only show that network setting. but if not. Yes creating a new folder will solve the problem.

Several months ago I went through and looked at the permissions settings in the security groups and documented them.  The site permission is the only one that is allocated to the network folders.  Whoever has site permissions has access to the following reports:  client push, client status, network, out of band
management, power management, replication traffic, siteclient information,
site-general, site-server information, wake on lan.

So if I give the site permission to run the reports, it runs ALL those reports.  That is why I was asking about this in the first place.  I thought giving individual perms to the reports in the folder would be a workaround until I realized that it doesn't allow access to the folder itself.  Thanks.  : )

• Proposed as answer by Sharath CK01 11 hours 18 minutes ago

Several months ago I went through and looked at the permissions settings in the security groups and documented them.  The site permission is the only one that is allocated to the network folders.  Whoever has site permissions has access to the following reports:  client push, client status, network, out of band
management, power management, replication traffic, siteclient information,
site-general, site-server information, wake on lan.

So if I give the site permission to run the reports, it runs ALL those reports.  That is why I was asking about this in the first place.  I thought giving individual perms to the reports in the folder would be a workaround until I realized that it doesn't allow access to the folder itself.  Thanks.  : )

• Proposed as answer by Sharath CK01 Friday, September 04, 2015 8:36 PM

Hi Gones,

I have the same requirement for allowing users to view the specific report instead of all the reports.

Let me know if you have figured out the solution to allow only the specific reports.

On my new blog site there are details on how to do this. http://www.enhansoft.com/blog/how-to-grant-permission-to-a-single-sccm-2012-ssrs-report