Report execution error:The permissions granted to user are insufficient for performing this operation.

Most likely, some of the tables queried is not in the chain of ownership. The user in question doesn't have to read from certain tables.

Really? every user that views my reports has to have permission to the tables?

If you are not admin, ask them to look at the ownership chain. If a view is used for this purpose, then the view may include a table lacking proper ownership.

I am an admin so what should i be looking at?

What the report based on?

SP, View, or table(s)?

I am using stored procedures to return the data from the tables

every user that views my reports has to have permission to the tables?

Sure. You need to see the SSRS as any application or website. Who will work with that need to have access to the database objects.

can you give me a screen shot on how to do this? Do i have to do this for every sp and table or can i do it all at one somewhere?

First of all, apart of the reports there is any other application that has access to the database?

no, only the reports

Ok. Since it's only reports they will only need read permissions so you need to create their login and grant them the respective read permission and for that you can use the db_datareader role:

EXEC sp_addlogin 'DOMAIN\UserName' --> assuming that are AD users
GO
USE DatabaseName
GO
EXEC sp_addrolemember 'db_datareader','DOMAIN\UserName'

Select allOpen in new window

i get this error  

'domain\username' is not a valid name because it contains invalid characters.

In your sp, there must be a view or some tables queried. Make sure the users have right to reach the sachems the view or tables belong. It seems the ownership of some of those tables is not granted.

Mike

so i reverse the \ to / and get

'domain/username'  does not exists in the database

'domain\username' is not a valid name because it contains invalid characters.

Please substitute DOMAIN with your domain name and USERNAME with a valid user name. They are only an example and you should replace with real values.

yeah that's what i did ....

Let replace it with the CREATE LOGIN command:

CREATE LOGIN [<domainName>\<login_name>] FROM WINDOWS;

Select allOpen in new window