Solved

Security manage in SSRS

Posted on 2016-08-22
1
81 Views
Last Modified: 2016-09-07
Hello,

I need some advice on setting up security/permissions to users in SSRS.
Here is the requirement
1.      Build one standard report using Report Builder. Publish this report in SSRS.
2.      Provide access to users/groups. Filter the data dynamically based on the department the user belongs to (in active directory we can use the ORGANIZATION_UNIT the user is set to). So for example, If USER A is part of OU A then he/she should only see the data of OU A.
3.      There are some PII data in the report. For example SSN, DOB, ADDRESS etc. Only certain users should be able to view it and by default it should be locked down for all users.
Please let me know
Thank you
0
Comment
Question by:angel7170
1 Comment
 
LVL 40

Accepted Solution

by:
lcohan earned 500 total points
ID: 41771853
1.      Build one standard report using Report Builder. Publish this report in SSRS.

2.      Provide access to users/groups.
This can be done easily via the SSRS "Predefined Roles" and please see https://msdn.microsoft.com/en-us/library/ms157363.aspx for details.

2.1 Filter the data dynamically based on the department the user belongs to (in active directory we can use the ORGANIZATION_UNIT the user is set to). So for example, If USER A is part of OU A then he/she should only see the data of OU A.
I believe you should be able to achieve that fairly easy by using "dynamic parameters" like described here: https://blogs.msdn.microsoft.com/sqlforum/2011/05/03/walkthrough-control-dataset-query-dynamically-based-on-ssrs-report-parameters/
and here where you will see how to add cascading parameters to a report: https://technet.microsoft.com/en-us/library/aa337169(v=sql.100).aspx
a gogle search on "questions/1053396/updating-report-parameters-based-on-perameter-selection-ssrs" and give you more details about what others did to "Updating report parameters based on perameter selection"


3.      There are some PII data in the report. For example SSN, DOB, ADDRESS etc. Only certain users should be able to view it and by default it should be locked down for all users.
Similar to above - so you qould need to define the query that gives you the list of all "Only certain users should be able to view it" and you can create a dataset with that then use that dataset as input to decide further filtering on all report queries.
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Introduction As you'll probably know, a data region in a SQL Server Reporting Services report can be linked to only one dataset.  This makes it troublesome when you need to display data from more than one dataset in the same data region.  SQL Serve…
Hi, I have heard from my friends that it’s not possible to create Label Printing report using SSRS. I am amazed after hearing this words not possible in SSRS. I googled lot and found that it is possible to some of people know about the Report Bui…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question