Answered Passing user credentials to SSRS subscription

  • Wednesday, January 26, 2011 10:07 PM
     
     

    This is a combination of an SSRS and Sharepoint question. I'm running Sharepoint 2010 in SSRS intergrated mode. 

    Does anyone know of a way/work around to generated subscriptions based on a user's credential.  So that if user A sucbribes to a report, the report will be deliver with only data that he/she is authorized to see (I have a SSAS cube that uses dynamic security).  I have my subscriptions set up against datasource that use the unattended services which brings back all data regardless of which user has subscribed. Not good :-(

    Anyone have any geneous ideas that they've used to over come this? Thanks in advance

All Replies

  • Monday, January 31, 2011 9:07 AM
    Moderator
     
     

    generated subscriptions based on a user's credential I had not made this.

     

    but first, you need to configure Windows Authentication instead of Trusted Account ;

     

    And you have to configure SharePoint web application to use Classic Windows authentication instead of Claim based Windows authentication, since according to http://technet.microsoft.com/en-us/library/ff487970.aspx

     

    Reporting Services Integration Page

    SharePoint 2010 Web application configuration

    Supported

    Windows Authentication

    Classic Based Authentication

    Yes

    Trusted Account

    Claims Based Authentication

    Yes

    Trusted Account

    Classic Based Authentication

    Yes

    Windows Authentication

    Claims Based Authentication

    Yes. The Reporting Services proxy will fallback to use Trusted Account authentication.

     

    I encountered the following message when I configured all these and click the Add Subscriptions button on the Manage Subscriptions page:

     

    subscriptions cannot be created because credentials used to run this report are not stored. Provide credentials for the report data source(s) or contact your administrator.

     

  • Tuesday, February 01, 2011 3:35 AM
    Moderator
     
     Answered

    Sorry, my former study might have not been in the right direction. Since your requirement is not user click open report and pass the current user credential to analysis service, but report subscription. You don't have to use Classic Based Authentication for SharePoint and Windows Authentication for Reporting Services Integration Page as I said before.

     

    Data-Driven Subscription may be the right direction. It is supported in SharePoint integration mode http://msdn.microsoft.com/en-us/library/bb326290.aspx .

  • Tuesday, February 01, 2011 8:31 AM
    Moderator
     
     Answered

    Since for dynamic security in SSAS, you will need the UserName() function to get the current connecting Windows User, for report subscription run under the unattended service account http://technet.microsoft.com/en-us/library/bb283320.aspx, the username() will not return the result you want.

     

    You may use the CustomData() function to get the user name passed by reporting service to SSAS. What follows are the articles about this I have read so far: http://www.rodcolledge.com/rod_colledge/2010/10/ssas-dynamic-security-kerberos-and-performancepoint.html

    http://www.ssas-info.com/VidasMatelisBlog/14_ssas-security-different-methods

  • Tuesday, February 01, 2011 1:52 PM
     
     
    Thanks I'll check out those articles