User access/security in SSRS 2005
-
Tuesday, May 15, 2012 7:48 PMI have several report that I can currently get to by logging on as Administrator when prompted by Windows Security. There will other users that will need to access these reports and without being able to see what I see logged in as Administrator. In other words, those users will have view access only. My question is how do I set up other user accounts to access these reports. I noticed when going into SSRS Report Manager as Administrator I have the abililty to set up 'Site-Wide Security' or system role assignments, item level roles, etc. Would this be something I could do as far as setting up users with their own accounts or is there another method of doing this?
All Replies
-
Tuesday, May 15, 2012 8:09 PMModerator
Yes, and specifcally you need to
1) Give it a system user role on the SSRS site (the site-wide), and then
2) Assign the BROWSER Item role to each user-report that permitted to be seen.
Arthur My Blog
-
Wednesday, May 16, 2012 1:26 PMModerator
Hi There
Please follow these steps1.Start Report Manager by going to http:/yourdmain/Reports
2.Click Site Settings.
3.Click Security.
4.If a role assignment already exists for the user or group for which you want to configure Report Builder access, click Edit.
Otherwise, click New Role Assignment. In Group or user, enter a Windows domain user or group account in this format: <domain>\<account>.
5.Select System User, and then click OK.
6.Click Home.
7.Click the Properties tab.
8.Click the Security tab.
9.If a role assignment already exists for the user or group for which you want to configure Report Builder access, click Edit.
Otherwise, click New Role Assignment. In Group or user, enter a Windows domain user or group account in this format: <domain>\<account>.
10.Select browser role, and then click Apply.
I hope this will help
Please let me know if you have any questions Many Thanks Syed Qazafi Anjum Please click Mark as Answer if this resolves your problem or Vote as Helpful if you find it helpful.
-
Wednesday, May 16, 2012 2:33 PMI tried adding my network user to the Reports and I get an error 'The user or group name 'Domain\username' is not recognized.
(rsUnknownUserName). Is it possible to add my login I use everyday that I login to my computer?- Edited by bootzilla Wednesday, May 16, 2012 2:33 PM
-
Wednesday, May 16, 2012 3:48 PMModerator
No, the authentication would not happen with your login.
You probably have mistyped the name of the user, make sure it exists, too.
Arthur My Blog
-
Wednesday, May 16, 2012 5:16 PM
I've already got a role set when I go to the Home > Properties tab. One is called BUILTIN\USERS that is set to BROWSER role. How do I set up users to use that role.
- Edited by bootzilla Wednesday, May 16, 2012 5:55 PM
-
Thursday, May 17, 2012 2:07 AMModerator
Hi There
You need to set this role for your domain users both on home as well as on your folder so it will look like this one
Group or User Role
Your Domain\Domain Users Browser
I am putting some screenshot for your help
Please let me know if you have any questions
Many thanks
Syed Qazafi Anjum
Please click "Mark as Answer" if this resolves your problem or "Vote as Helpful" if you find it helpful
- Proposed As Answer by Syed Qazafi AnjumMicrosoft Community Contributor, Moderator Thursday, May 17, 2012 2:08 AM
-
Thursday, May 17, 2012 2:45 AMModerator
Hi bootzillla,
To add a user or group to a role:http://msdn.microsoft.com/en-us/library/ms156034.aspx
Please remember to mark the replies as answers if they help.
-
Thursday, May 17, 2012 1:57 PM
Hi There
You need to set this role for your domain users both on home as well as on your folder so it will look like this one
Group or User Role
Your Domain\Domain Users Browser
I am putting some screenshot for your help
Please let me know if you have any questions
Many thanks
Syed Qazafi Anjum
Please click "Mark as Answer" if this resolves your problem or "Vote as Helpful" if you find it helpful
When I try this I get 'The user or group name 'popweaver.com\Domain Users' is not recognized. ' I know that is our domain name what am I doing wrong. What steps am I missing. This is what I'm doing when try to add the role:
- Edited by bootzilla Thursday, May 17, 2012 1:58 PM
-
Thursday, May 17, 2012 2:22 PMModerator
I think you need to drop the domain extension .com
use
popweaver\Domain Users notation
Arthur My Blog
-
Thursday, May 17, 2012 2:41 PMWell I just found out none of this will work this way. The server I'm trying to connect to is outside of our domain so it won't work this way. I will have to create some kind of custom form to get this work. I literally have no idea how to do this so if anyone has any suggestions on how, where to build this I sure could use the help. Do I create a custom form in the same solution as where my reports are on in Visual Studio or is this done somewhere else?
-
Wednesday, May 23, 2012 3:28 PMModerator
It seems you need to crate a custom application to access the reports that will implement a different method of authentication.
And perhaps you will need a GUI to execute the reports. But a cross domain access is also supported by SSRS - you just need to create special groups, thing is in your case the accounts from one domain do not exist (yet) on the other therefore you cannot grant them any access.
so, either create them or make a custom app as shown here:
http://www.c-sharpcorner.com/UploadFile/robo60/StandaloneRDLCReports11142007183516PM/StandaloneRDLCReports.aspx
Arthur My Blog
.png)
