• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 507
  • Last Modified:

SSRS Security

I have been tasked with providing one role for all users to use to get into any report in SSRS..Some people access report manager and the folders within directly.. Some people use an ASP.NET wibe site that passes a user name and password to SSRS and some people use a VB.net app that passes a user name and password and send a report to a PDF output.. They was ONE single Role that I would set up in SQL Server 2008 called Report_Role.. I want to add people based on their active directory windows name( everyone is something like LEX/cemith01) to this role so no matter how they access SSRS the can get in without having to provide a user name and password... The reports data comes from the same server but different databases and some use stored procs etc.. What do you recommend and is this possible? Remember the goal is to have anyone that I assign to the 1 role be able to read or write to a SSRS report in any folder.. Just basically be able to get to report manager so they can go to the folder they want, print a report or enter data into a report.
0
cheryl9063
Asked:
cheryl9063
2 Solutions
 
Alpesh PatelAssistant ConsultantCommented:
Go to site setting and create role and assign role to users.

Untitled.png
0
 
Marten RuneCommented:
Create a domain group, and put users in the ad group, then create a login for the server for this group, create a user for this login in the database, create the role, and asign it to the user, grant permissions to the role. Example:
USE master;
GO
CREATE LOGIN [MYDOMAIN\APPLICATION SUPPORT] FROM WINDOWS;
GO
USE mydb;
GO
CREATE USER [MYDOMAIN\APPLICATION SUPPORT] FROM LOGIN [MYDOMAIN\APPLICATION SUPPORT];
GO
CREATE ROLE rSupport;
GO
EXEC sp_addrolemember 'rSupport', 'MYDOMAIN\APPLICATION SUPPORT';
GO
GRANT SELECT, INSERT,UPDATE, etc ON Mytable TO rSupport;
GO

In your case mydb would be the reporting services db, and to let users create reports they need the rights to store them on disk where the web for reporting services reside, so let this domain group have apropriate ntfs permissions on the reports directories on the webserver also.

Should cover it I think

Regards Marten
0

Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now