Solved

Security manage in SSRS

Posted on 2016-08-22
1
52 Views
Last Modified: 2016-09-07
Hello,

I need some advice on setting up security/permissions to users in SSRS.
Here is the requirement
1.      Build one standard report using Report Builder. Publish this report in SSRS.
2.      Provide access to users/groups. Filter the data dynamically based on the department the user belongs to (in active directory we can use the ORGANIZATION_UNIT the user is set to). So for example, If USER A is part of OU A then he/she should only see the data of OU A.
3.      There are some PII data in the report. For example SSN, DOB, ADDRESS etc. Only certain users should be able to view it and by default it should be locked down for all users.
Please let me know
Thank you
0
Comment
Question by:angel7170
1 Comment
 
LVL 39

Accepted Solution

by:
lcohan earned 500 total points
ID: 41771853
1.      Build one standard report using Report Builder. Publish this report in SSRS.

2.      Provide access to users/groups.
This can be done easily via the SSRS "Predefined Roles" and please see https://msdn.microsoft.com/en-us/library/ms157363.aspx for details.

2.1 Filter the data dynamically based on the department the user belongs to (in active directory we can use the ORGANIZATION_UNIT the user is set to). So for example, If USER A is part of OU A then he/she should only see the data of OU A.
I believe you should be able to achieve that fairly easy by using "dynamic parameters" like described here: https://blogs.msdn.microsoft.com/sqlforum/2011/05/03/walkthrough-control-dataset-query-dynamically-based-on-ssrs-report-parameters/
and here where you will see how to add cascading parameters to a report: https://technet.microsoft.com/en-us/library/aa337169(v=sql.100).aspx
a gogle search on "questions/1053396/updating-report-parameters-based-on-perameter-selection-ssrs" and give you more details about what others did to "Updating report parameters based on perameter selection"


3.      There are some PII data in the report. For example SSN, DOB, ADDRESS etc. Only certain users should be able to view it and by default it should be locked down for all users.
Similar to above - so you qould need to define the query that gives you the list of all "Only certain users should be able to view it" and you can create a dataset with that then use that dataset as input to decide further filtering on all report queries.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Written by Valentino Vranken. A while ago I wrote an article called Chart Optimization Tips (http://www.experts-exchange.com/articles/Microsoft/Development/MS-SQL-Server/MS-SQL_Reporting/Chart-Optimization-Tips.html).  This article explained how …
Introduction As you'll probably know, a data region in a SQL Server Reporting Services report can be linked to only one dataset.  This makes it troublesome when you need to display data from more than one dataset in the same data region.  SQL Serve…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now