Solved

Security manage in SSRS

Posted on 2016-08-22
1
75 Views
Last Modified: 2016-09-07
Hello,

I need some advice on setting up security/permissions to users in SSRS.
Here is the requirement
1.      Build one standard report using Report Builder. Publish this report in SSRS.
2.      Provide access to users/groups. Filter the data dynamically based on the department the user belongs to (in active directory we can use the ORGANIZATION_UNIT the user is set to). So for example, If USER A is part of OU A then he/she should only see the data of OU A.
3.      There are some PII data in the report. For example SSN, DOB, ADDRESS etc. Only certain users should be able to view it and by default it should be locked down for all users.
Please let me know
Thank you
0
Comment
Question by:angel7170
1 Comment
 
LVL 39

Accepted Solution

by:
lcohan earned 500 total points
ID: 41771853
1.      Build one standard report using Report Builder. Publish this report in SSRS.

2.      Provide access to users/groups.
This can be done easily via the SSRS "Predefined Roles" and please see https://msdn.microsoft.com/en-us/library/ms157363.aspx for details.

2.1 Filter the data dynamically based on the department the user belongs to (in active directory we can use the ORGANIZATION_UNIT the user is set to). So for example, If USER A is part of OU A then he/she should only see the data of OU A.
I believe you should be able to achieve that fairly easy by using "dynamic parameters" like described here: https://blogs.msdn.microsoft.com/sqlforum/2011/05/03/walkthrough-control-dataset-query-dynamically-based-on-ssrs-report-parameters/
and here where you will see how to add cascading parameters to a report: https://technet.microsoft.com/en-us/library/aa337169(v=sql.100).aspx
a gogle search on "questions/1053396/updating-report-parameters-based-on-perameter-selection-ssrs" and give you more details about what others did to "Updating report parameters based on perameter selection"


3.      There are some PII data in the report. For example SSN, DOB, ADDRESS etc. Only certain users should be able to view it and by default it should be locked down for all users.
Similar to above - so you qould need to define the query that gives you the list of all "Only certain users should be able to view it" and you can create a dataset with that then use that dataset as input to decide further filtering on all report queries.
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Time Corrections for Reports Working with a report, we made some interesting discoveries about the time corrections/updates We are using the following Parameters: Starting Entered Date (Date) formatted as Data type: "Date/Time" Ending Entered …
How to use Variables  and Custom code in SSRS report and Assembly reference to use compile shared code in SSRS. Its big question for all who are working with SSRS. It is easy to create assembly and refer in SSRS report, still there are some steps…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question