Solved

Report execution error:The permissions granted to user are insufficient for performing this operation.

Posted on 2015-02-16
18
67 Views
Last Modified: 2015-02-20
A client is reporting that they get this error ..... any reason why?

I HAVE tried adding permissions in report manager under site settings AND folder settings
0
Comment
Question by:vbnetcoder
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 6
  • 4
18 Comments
 
LVL 34

Expert Comment

by:Mike Eghtebas
ID: 40612910
Most likely, some of the tables queried is not in the chain of ownership. The user in question doesn't have to read from certain tables.
0
 

Author Comment

by:vbnetcoder
ID: 40612925
Really? every user that views my reports has to have permission to the tables?
0
 
LVL 34

Expert Comment

by:Mike Eghtebas
ID: 40612928
If you are not admin, ask them to look at the ownership chain. If a view is used for this purpose, then the view may include a table lacking proper ownership.
0
Is Your DevOps Pipeline Leaking?

Is your CI/CD pipeline a hodge-podge of randomly connected tools? You’ve likely got a tool to fix one problem & then a different tool to fix another, resulting in a cluster of tools with overlapping functionality. Learn how to optimize your pipeline with Gartner's recommendations

 

Author Comment

by:vbnetcoder
ID: 40612937
I am an admin so what should i be looking at?
0
 
LVL 34

Expert Comment

by:Mike Eghtebas
ID: 40613377
What the report based on?

SP, View, or table(s)?
0
 

Author Comment

by:vbnetcoder
ID: 40613999
I am using stored procedures to return the data from the tables
0
 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 40614032
every user that views my reports has to have permission to the tables?
Sure. You need to see the SSRS as any application or website. Who will work with that need to have access to the database objects.
0
 

Author Comment

by:vbnetcoder
ID: 40614058
can you give me a screen shot on how to do this? Do i have to do this for every sp and table or can i do it all at one somewhere?
0
 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 40614232
First of all, apart of the reports there is any other application that has access to the database?
0
 

Author Comment

by:vbnetcoder
ID: 40614306
no, only the reports
0
 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 40614316
Ok. Since it's only reports they will only need read permissions so you need to create their login and grant them the respective read permission and for that you can use the db_datareader role:
EXEC sp_addlogin 'DOMAIN\UserName' --> assuming that are AD users
GO
USE DatabaseName
GO
EXEC sp_addrolemember 'db_datareader','DOMAIN\UserName'

Open in new window

0
 

Author Comment

by:vbnetcoder
ID: 40614492
i get this error  

'domain\username' is not a valid name because it contains invalid characters.
0
 
LVL 34

Expert Comment

by:Mike Eghtebas
ID: 40614503
In your sp, there must be a view or some tables queried. Make sure the users have right to reach the sachems the view or tables belong. It seems the ownership of some of those tables is not granted.

Mike
0
 

Author Comment

by:vbnetcoder
ID: 40614507
so i reverse the \ to / and get

'domain/username'  does not exists in the database
0
 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 40614523
'domain\username' is not a valid name because it contains invalid characters.
Please substitute DOMAIN with your domain name and USERNAME with a valid user name. They are only an example and you should replace with real values.
0
 

Author Comment

by:vbnetcoder
ID: 40614559
yeah that's what i did ....
0
 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 40614579
Let replace it with the CREATE LOGIN command:
CREATE LOGIN [<domainName>\<login_name>] FROM WINDOWS;

Open in new window

0
 
LVL 50

Accepted Solution

by:
Vitor Montalvão earned 500 total points
ID: 40614589
I've realized now that I forgot the CREATE USER  statement. So this should be the complete script:
CREATE LOGIN [<domainName>\<login_name>] FROM WINDOWS
GO
USE DatabaseName
GO
CREATE USER [<domainName>\<login_name>] FOR LOGIN [<domainName>\<login_name>] WITH DEFAULT_SCHEMA=[dbo]
GO
EXEC sp_addrolemember N'db_datareader', N'[<domainName>\<login_name>]'

Open in new window

0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Written by Valentino Vranken. A while ago I wrote an article called Chart Optimization Tips (http://www.experts-exchange.com/articles/Microsoft/Development/MS-SQL-Server/MS-SQL_Reporting/Chart-Optimization-Tips.html).  This article explained how …
It is helpful to note: This is a cosmetic update and is not required, but should help your reports look better for your boss.  This issue has manifested itself in SSRS version 3.0 is where I have seen this behavior in.  And this behavior is only see…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question