The following forum(s) have migrated to Microsoft Q&A: All English System Center 2012 Configuration Manager forums!
Visit Microsoft Q&A to post new questions.

Learn More

Remove From My Forums

Reports not visible in SCCM console

Question
0

Sign in to vote

Hi All,

Recently we have migrated from old SCCM infrastructure to new SCCM infrastructure. But now under Monitoring-> Reports sections , all the reports are visible for full Administrators. We have a different team for software distribution with rights only related to distribution with limited delegation. That team is unable to see any of the reports under the reports path. In the old infra, it was seen by everyone. After migration, it is not seen by anyone except Full admins. But when i check security scopes for the reports, the software distribution team froup is present under that. But i don't understand why it is not seen by them in console. Can anyone explain what might be missing.

Note: SSRS reporting site is available and seen by everyone.

Any help would be much appreciated

Regards,

Girish

Wednesday, December 21, 2016 5:34 PM

All replies

0

Sign in to vote

Exactly what security role did you grant them? if it is a custom role, exactly what rights did you grant it?
Garth Jones

Blog: http://www.enhansoft.com/blog Old Blog: http://smsug.ca/blogs/garth_jones/default.aspx

Twitter: @GarthMJ Book: System Center Configuration Manager Reporting Unleased

Wednesday, December 21, 2016 6:26 PM
0

Sign in to vote
Hi Garth,

Security roles provided are Application Deployment Specialist, Compliance settings specialist- Read are the roles provided for them.

___________________________

Girish
- Edited by Karnam Girish Wednesday, December 21, 2016 7:14 PM
Wednesday, December 21, 2016 7:13 PM
0

Sign in to vote

Security roles provided are Application Deployment Specialist, Compliance settings specialist- Read are the roles provided for them.

So these are custom roles, if read is the only right that you have given them, that is not enough. You will need a lot more than just read.

First off, if you only want them to run report, you should point them to the web interface only and not the console.

Secondly, they will need the Report sec right + rights on collection (Read and Read resources) + Site (Read) these are the bare minimum that they will need. They maybe more right they need to, you will need to test each report one by one to ensure they correctly.

Garth Jones

Blog: http://www.enhansoft.com/blog Old Blog: http://smsug.ca/blogs/garth_jones/default.aspx

Twitter: @GarthMJ Book: System Center Configuration Manager Reporting Unleased

Wednesday, December 21, 2016 7:21 PM
0

Sign in to vote
Hi Garth,

Any suggestions if i should make any changes here ? Does this inventory reports section refers to Reports under Monitoring->Reporting-> Reports node ?

________________________

Girish
- Edited by Karnam Girish Wednesday, December 21, 2016 7:48 PM
Wednesday, December 21, 2016 7:41 PM
0

Sign in to vote
Grab the Report reader sec role from http://www.enhansoft.com/blog/new-tool-for-creating-configuration-manager-2012-report-reader-ad-security-groups

This will allow them to read all reports within CM12 R2.

From there you can adjust thing so they only see what you want them too.

Keep in mind that a user can belong to two or more sec roles.
Garth Jones

Blog: http://www.enhansoft.com/blog Old Blog: http://smsug.ca/blogs/garth_jones/default.aspx

Twitter: @GarthMJ Book: System Center Configuration Manager Reporting Unleased
- Proposed as answer by Ant_G Thursday, December 22, 2016 6:02 AM
Wednesday, December 21, 2016 8:57 PM
0

Sign in to vote

i tried that. Reports are not even showing up for default "Read Only analyst Role" members. when i click on report properties, it is not not showing the reporting server name in "Reporting Services Point". where as the full admins can see the server name and reports. how can i configure that ?

Regards,

Girish

Friday, December 23, 2016 8:53 AM
0

Sign in to vote

First you want to access the reports from the web interface instead of from the console. If they can't see the base page then they will not see anything in the console.

Second, exactly what scopes did you give them access to?
Garth Jones

Blog: http://www.enhansoft.com/blog Old Blog: http://smsug.ca/blogs/garth_jones/default.aspx

Twitter: @GarthMJ Book: System Center Configuration Manager Reporting Unleased

Friday, December 23, 2016 10:24 AM
0

Sign in to vote

Hi,

Was your issue resolved?

If yes, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.

Best Regards,

Ray
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Wednesday, December 28, 2016 5:30 AM