I am having an interesting issue with SSRS and security settings. I have 2008 R2 installed on a Windows Server 2008 box. All users log into their workstations using their active directory credentials, some are local admins, some are just standard users. I have no problem accessing either the management or directory site as DOMAIN\administrator.
I have all reports, folders and data sources set to inherit the security settings on the server, but when I go to a users machine and type in the server address (host/reportserver), I get rsAccess Denied DOMAIN\USER user has insufficient permissions.
I have tried a number of different things based on posts I've read.
Added NT Authority\Authenticated Users and NT Authority\Network
Service to security permissions
Gave users 'Administrator' level access on the report server
Disabled UAC on the workstation
I read that launching IE as administrator might solve the issue. That would require all users to be local admins, no? I think that is an unacceptable solution.
As always, I appreciate assistance anyone can offer.
1) Add the username(domain\username) to the folder settings(New role assignment-->browser)
of the report manager. This will give access to all the folders on the report manager.
for example if your username is (domain\rocky) then add this domain\rocky to the report manager.
2) make sure the username(domain\rocky) exists in the windows active directory.
3) For safety reasons : Don't provide administrator privileges to users.
Related
I'm trying to recover an old SSRS 2005 installation. The report server itself has been recovered from a backed up image and is working fine except for a missing datasource. When I log into the Report Manager (http://localhost/reports) I do not see the extra tabs as shown here (I only see General) so I cannot replace the missing datasource. What I have tried:
I am a member of the AD group builtin/administrators, and can see Site Settings and can configure site-wide security
I am an admin on the local machine
I have accessed Report Manager with IE in admin mode and specified that localhost is in IE's trusted sites
Applied default settings to the Virtual Directory as suggested here
I believe that local administrators are always granted admin access to an SSRS installation so am pretty confused. Could this be something to do with the server having been recovered from an image? Or are there permissions I may have lost for some reason? Any suggestions gratefully received.
To fix this I needed to disable anonymous access to the Reports websites "Reports" and "ReportServer" by going to IIS => Web Sites => Default Website => Properties => Directory Security => Authentication and access control => uncheck "Enable anonymous access".
I did a few other things in addition to the above but I think the anonymous access was the key:
Identified the admin login via its distinctive SID
Logged in as this admin
Enabled the disabled "Administrator" account (which on my machine neither had the admin roles, nor was the original admin account) and gave it admin permissions
I'm using BIDS (Visual Studio 2008) to create and deploy SSRS reports to a report server, on a third-party hosted server.
The username and password that it uses to deploy reports onto the report server seems to be saved somehow, and I don't seem to be able to change it. Is there a way of changing this account? I'm getting a rsAccessDenied as expected. Previously it has asked for a username and password. To confirm, I'm getting this in the Error List pane:
The permissions granted to user 'SERVERNAME\ssrs' are
insufficient for performing this operation.
I can't start the software using these credentials as they only exist on the server. I can't change the permissions of this "fixed" account either as it's used by staff for read-only viewing of the reports. I already have an account for writing to the server that I would use if this software would let me.
I've looked at every setting I could find and I've tried creating a new solution, copying the report I need to deploy to this solution, but it still doesn't ask me for credentials.
The credentials were saved in Windows Control Panel -> Credential Manager (I'm on Windows 7). Just edit or delete the "Windows Credentials" for the server. For me, these credentials were, I think, saved by Internet Explorer rather than BIDS, but BIDS is happy to use them anyway.
After a fresh install of SQL Server 2012 Developer on my Windows 7 machine, I configure SSRS. Then, in IE (version 11), I try to access the SSRS server at http://(servername)/Reports. Windows asks for my username and password. Odd, because I'm an administrator. So I enter my username and password and I get this reply:
User '' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.
Researching the issue, I come across a number of answers, including:
Reporting Services permissions on SQL Server R2 SSRS
SSRS 2008: User Does Not Have Required Permissions
The answers to these questions are similar:
Run IE as an administrator
Add the SSRS URL to Trusted Sites in Security tab of Internet Options
Retry SSRS URL
On success, add your user to Site Settings and Folder Settings with the appropriate permissions.
You should then be able to access SSRS without running IE as administrator
Additional workarounds include disabling UAC and repeating the steps above.
Running IE as an administrator did not work. At step 3. I got the same response as above and was never able to get to the SSRS home page.
Before disabling UAC, are there any other workarounds?
The workaround I found is from Peter O’Gorman's blog entry.
The steps above are the same, except add the URL to Local Intranet, not Trusted Sites:
Run IE as an administrator
Add the SSRS URL to Local Intranet in Security tab of Internet Options
Retry SSRS URL
On success, add your user to Site Settings and Folder Settings with the appropriate permissions.
You should then be able to access SSRS without running IE as administrator
To my pleasant surprise, this worked like a charm. Thanks Peter!
Run IE as an administrator - not Chrome. I swear I tried this before with no joy.
I don't understand why not Chrome and why administrator. Maybe Chrome somehow dismisses the elevated permissions. How does the rsManager know at what level the browser is running anyway?
Microsoft SQL Server Management Studio 12.0.2000.8
Microsoft Analysis Services Client Tools 12.0.2000.8
Microsoft Data Access Components (MDAC) 6.3.9600.16384
Microsoft MSXML 3.0 5.0 6.0
Microsoft Internet Explorer 9.11.9600.17498
Microsoft .NET Framework 4.0.30319.34209
Operating System 6.3.9600
Chrome Version 39.0.2171.95 m
Same steps as Glenn mentioned previously. I also had to add user to role in two different spots once I was able to access SQL Server Reporting Services - Home. In Folder setting -> security -> new role assignment and site settings -> security -> new role assignment. I added my user as well.
http://techasp.blogspot.com/2013/06/how-to-fix-reporting-services.html
This works for Reporting Services 2008 onwards
This one has been bugging me for a while, some users have access to the report server others get this error message. While trying to resolve it with a system administrator I came across this post from microsoft support
For users to navigate to a particular folder, they must have Browser role on
all folders starting at the root folder (the folder named "/" in the
item path or "Home" in Report Manager). So you will need to grant
those permissions explicitly. By default, permissions are inherited
from the parent folder. If there are any breaks in the inheritance,
you will need to set those permission explicitly.
What we did as a administrator users, was to navigate to Reports page, then folder settings and grant the user that does not have permissions Browser rights to the folder. Use could then navigate to the home page and work their way down the tree. the sys admin hadn't granted access to the user at the home level just on the folders and reports that have access to.
Been trying to get SSRS reporting service set up for a while now, and been stuck on the issue with UAC.
After setting up the Reporting Service Configuration Manager settings, with service account using my PC's login account, Database using ReportServer$SQLEXPRESS, etc. when launching the server # 127.0.0.1/Reports it directs me to 127.0.0.1/Reports/Pages/Folder.aspx and then after login with my PC's login this is what I get on my browser -
"User 'OCTETHP\Support' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed."
And I have done my researches online, I turned off UAC, I am on the administrator account, and I also tried to run the browser with right click to run as administrator option on both chrome and IE. Still does not solve this problem. Could anyone help me out with this??
I am currently running on windows 8.1. Thanks so much!
It is likely the problem is with the account the reporting server is running under (OCTETHP\Support). You may need to add this user to the web user group (IIS_WPG depending on your OS version). If that doesn't work, you can set the user to be a local administrator and work the permissions back from there.
If you want to run the reporting services from another account you'd want to follow these steps:
Open IIS Manager
Under websites locate the SSRS website (/Reports in your case)
In basic properties check the App Pool the site is running under
Go to the App Pools section of IIS and open the advanced properties
Setup the user that the App Pool runs under
You'll need to make sure the user is assigned to the web user group, and has permissions to access the folder that the website points to.
I have Fresh Install SSRS 2008 R2 on Win2k8 box ( on which i am administrator). After install, When i run Reports Manager, It gives following error
User 'WIN2008\Tellink' does not have required permissions. Verify that
sufficient permissions have been granted and Windows User Account
Control (UAC) restrictions have been addressed.
I could not find any answer on the web to quickly resolve the problem. Can anyone please help with this?
I found the answer. And here is solution - Since i was using non built in administrator account to access report manager, i was gettnig the error. I log off as 'WIN2008\Tellink' and log back in as Administrator Account to acess reports manager. Then i was able to access it.
After that i have added 'WIN2008\Tellink' usr to the usr role.