I am looking for a way to assign a windows user/group access to a hub or Datazen dashboard, similar to the way in SSRS we can assign user/group access on a report or report folder.
Rahul,
First, you either need to be the admin to the server or have "IS OWNER" permissions to a hub to be able to carry out any admin tasks such as adding users or assigning permissions.
Now, things are a little different in datazen from SSRS, at least for now, this might change after SQL Server 2016 release where datazen will be integrated with SQL Server and will be called Mobile Reports.
I am assuming you have already created users in Datazen and would like to assign them to a group and give group access/permissions.
-Click on the Hub name you would like to go to.
-Click on "User Groups" in left hand panel.
-Click on "Create New User Group" located on top right of the screen.
-Enter Group Name
(the group you created will appear after you create it)
- Click on "Users..." option for that Group.
- Check all the users that need to be assigned to that group.
Click on "Permissions" in left hand panel.
(Dashboards option is selected by default. You could either select a single dashboard or the dashboard group folder in the drop down box labeled "Dashboards & Dashboard Groups")
Select User Group/Users option in drop down box labeled "Set permissions for:"
Check the box next to the group that needs to be allowed access to.
Unfortunately, there is no possibility to add a windows user group in Datazen.
Datazen has a different paradigm as SSRS.
The only way is to create "local" groups in datazen as Maraduarz already wrote.
Best Regards
Daniel
Related
I am using Reporting Services for SQL Server 2016. If we want to enter a new user and gives him permissions on reports we know that we can use report service interface in order to enter a new user which will be tested if it really exists else the message user or group name is not recognized is displayed.
Is there away to enter permissions for a user that doesn't exist yet? I mean a user which it's Sid is null
Use Active Directory. Set up a group, such as "SSRS Browsers", within AD. Ensure any and all users who require access to the reports (including new users) are listed in this group. Then give the AD group the right level of access within SSRS itself.
I need some help with this error: The user does not have the required permissions. Verify that sufficient permissions have been granted and that the Windows User Account Control (UAC) restrictions have been handled.
Im executing ie as administrator.
Thanks!
By your comment I believe you are looking for NTFS permission and not the Reporting Services permissions. Try this:
'Run as' administrator IE and open your http://localhost/Reports (or whatever is the URL)
In the top right corner click on 'Site Setting' (http://localhost/Reports/Pages/Settings.aspx)
Check the 'Security' settings (http://localhost/Reports/Pages/Settings.aspx?SelectedSubTabId=SecurityLinkID)
After you set the permissions how you need, relaunch the browser without with your normal account and try it.
For more information about how to set the permissions read here: https://msdn.microsoft.com/en-us/library/ms156034(v=sql.110).aspx
To add a user or group to a system role
Start Report Manager (SSRS).
Click Site Settings.
Click Security.
Click New Role Assignment.
In Group or user name, enter a Windows domain user or group account
in this format: \. If you are using forms
authentication or custom security, specify the user or group account
in the format that is correct for your deployment.
Select a system role, and then click OK. [Roles are cumulative, so if you select both System Administrator and System User, a user or
group will be able to perform the tasks in both roles.]
Repeat to create assignments for additional users or groups.
To add a user or group to an item role
Start Report Manager and locate the report item for which you want
to add a user or group.
Hover over the item, and click the drop-down arrow.
In the drop-down menu, click Security.
Click New Role Assignment.
Note If an item currently inherits security from a parent item, click Edit Item Security in the toolbar to change the security settings.
Then click New Role Assignment.
In Group or user name, enter a Windows domain user or group account
in this format: \. If you are using forms
authentication or custom security, specify the user or group account
in the format that is correct for your deployment.
Select one or more role definitions that describe how the user or
group should access the item, and then click OK.
Repeat to create assignments for additional users or groups.
I have an SSRS report used by many users from different regions.
Is it possible to show/hide information based on region without
using parameters - we are using a single report?
Is it possible to give report permissions to users who are outside
of network(Company)?
Without using parameters how do you intend deciding which information to hide or show?
If (big IF because you haven't said why you cannot use parameters) what you want to do is possible then you are going to
have to
Create separate folders for each class of user.
Set the permissions on those folders so that they can only see their
own folder.
Put a copy of the report in the folder.
Have a hidden parameter which passes the class of user into the
report OR
Pass in the current windows authenticated user into the report and
report on class of user from the windows login.
In answer to your second question - Yes- you will need to set up Forms Authentication.
Is there a way to provide generic permissions for users to run reports stored in the Report Manager? I can see how to provide access on an individual user basis via Manage -> Security -> New Role Assignment, by adding the User's Windows login name and assigning them to the Browser role for the report. (Report Manager already knows the domain name).
However, we don't want to be continually having to manage this for each new user. I want anyone under that domain name to have access without needing to configure it. I had hoped that just adding the domain name as a 'user' to the Browser role for that report would do it, but to no avail.
You can add any domain group that has been set up, not just individual users, or you can simply add all domain users, i.e. MYDOMAIN\Domain Users to the Browser role, which seems to be what you're after.
However, I would recommend creating a generic user group like MYDOMAIN\SSRSReportUsers or something like that and adding this group to the browser role instead of MYDOMAIN\Domain Users, as adding all users to the Report Server seems like it doesn't give you many options to manage this in any sort of granular way.
I am not able to create subscriptions for SSRS reports as it gives the following error:
Subscriptions cannot be created because the credentials used to run
the report are not stored, or if a linked report, the link is no
longer valid.
My set up is as following:
ServerA - Database Server
ServerB - Report Server
MachineC - Internet explorer to view the reports
So I am viewing reports on Machine C, IE, and ServerB connects to ServerA for Datasource.
The problem sounds like the report expects the user to provide credentials when it is viewed. When you create a subscription, it does not have the credentials to execute the report.
Go to the report, click the properties tab, then choose Data Sources in the left pane.
Are you using a shared data source? Is it using Windows integrated security? If so, can you change it to use a service account made just to run these reports? You may need to view these properties by viewing the data source itself.
If it is a custom data source is the option "Credentials supplied by the user running the report" selected? If so, can you change it to "Credentials stored securely in the report server"?
Either way, if you want to set up a subscription, I have made it work by providing credentials in the data source rather than have the user input them.
If you are worried about security, I would suggest managing that on the report level rather than the data source level.
What the error does not make clear is, in order to be able to subscribe to a report not only must the data source be set to "Credentials stored securely in the report server" you must also not select the option "Impersonate the authenticated user after a connection has been made to the data source".
The way I did was to create a new data source in the report builder and explicitly provided the username and password there to be used.
Then, used that username password with the new data source with the report and voila it worked.
I faced same issue as you, and i found its solution, as #richard said already that it is related to credential of data source you use for your deployed report.
To resolve it Follow these steps:
1. Right click on your shared Data source which you use in your deployed report.
2. Click On Edit Button.
3. a new window will open click on Credential from left pane, Select Use this user name and password then click ok.
4. Check on Save these credential option you get on to previous screen.
5. Test connection and if succeed click ok and deploy your project on report server.
For reference plese look at screen shot given below:
Thanks.