We have several Collections in our TFS 2010 server.
This server hosts all of our TFS related services.
I'd like to allow a specific programmer to create Team Projects within his dedicated collection.
He belongs to the collection's TFS administrators group.
When he tries to create a new Team Project, it fails with a Reporting permissions error.
I understand that he also needs Reporting services permissions to create the relevant Reporting objects for the new Team Project, but I don't want him to be a full admin for the whole server's Reporting Services.
Is there a way to allow him the full ability to create new Team Projects without making a full Reporting Services admin?
source:http://www.microsoft.com/download/en/details.aspx?id=8175
To grant administrative permissions for a team project collection in Reporting Services
Start Internet Explorer.
In the Address bar, type the following URL, where ReportServer is the name of the server that is running Reporting Services: http://ReportServer/Reports/Pages/Folder.aspx
Click the Properties tab, and then click New Role Assignment.
In Group or User Name, type the name of the account for the user or group to whom you want grant administrative permissions.
In Role, click Team Foundation Content Manager, and then click OK.
The one thing missing in the manual, is that you need to do this for /TfsReports/[collectionname] while setting stop security inheratence.
Related
i am new to this and this is my requirement.
i need to create a folder for my team and have reports available there instead of sharing them to my inbox.
we do have a BO admin team, so where should they create a folder and how I need to save/publish this report over there.
please help
You just need a network folder to which the user the SIA is running as (see below) and your team both have access.
Then choose "File System" as your destination when scheduling. We use a system user for the credentials in the schedule. You do not want to schedule with a regular user and then have your scheduled reports fail when that user gets disabled when they leave your company.
It is possible that you may not see "File System" in the list of destinations. If that is the case your admin team will need to add it as a valid destination within the system's AdaptiveJobServer (CMC -> Servers).
I have just started working with Report Services for a company and noted that none of the content managers have been removed (even if they have left the company). I was wondering if anyone knows whether there would be any repercussions if i removed or down graded their role...?
These content managers have created and deployed reports, set up security users, created folders and set up subscriptions.
I can recreate the subscriptions so that they are not under the ex-employees name, but what about the rest....
Thanks inadvance.
Removing users from the Content Managers role will not stop or remove anything in SSRS other than those users' ability to access reports. It will not remove folders or other users.
Disabling accounts in Active Directory might disable some data sources, if they were set to use that user account to access the data. But if they were set to use a service account as the data access account, then they will continue to work, regardless of what's happened to the creating account.
I am trying to get security on Reporting services set up. I have installed reporting services with all the defaults and I was able to create and publish a report. Using the link [http://server/reports] I was able to view that report. Bearing in mind that i am in the domain administrators group.
I then asked a non domain admin user to review the report but they got the message: • The permissions granted to user 'DOMAIN_ABC\username' are insufficient for performing this operation. (rsAccessDenied)
It then dawned on me that I would need to set up security by assigning the 'Browser' role to DOMAIN_ABC\Domain Users.
At that point I realized that I had no way of interfacing with the security side of things as none of the Home, My Subscriptions, Site Settings tabs were displaying (as is the case with a 2005 RS deployment we have). Thus began my search for how to get the 'admin' view into the environment to enable security and access. I have thus far been unsuccessful so far, I have tried running IE as the 'Administrator', added the server to my 'Trusted' sites list. Checked the RS config file, set the Service Account to 'Local Service' but still no joy. Does anyone know what I may try?
Thanks in Advance,
Jonathan
You can not view the admin settings unless u got that permission.
Only Report manager administrator can create roles and users from report manager url [http://localhost/Reports/] then go to site settings ----> security,----> new role assignment.
If the user in system Administration group then only he can view the site settings option in the home page, If the user is on other group like content manager /System user then he can not view the site settings option.
You need to first add the user in the System Administrator group.then he can view all these settings.
Hope this helps...
My domain account is administrator at this server, which runs sql 2008r2 and reporting service. when i navigate to "http://localhost/reports" , i can see the web ui. Anyway, i click to site settings, than navigate to Security tab. At this window i go to New Role Assignment. My problem is at this section. The only roles i see here are System Administrator and System User.
I googled about it, the screenshots i saw all had report server roles like browser,Publisher,Report builder.
Anyhow, is this about the installation process, or could it be about my domain account's permissions, or something other?
Thanks in advance
Edit
When i connect to report server using sql server management studio, in security tab i can see both roles and system roles folders.
Roles in Report Manager are contextual. What you see in site settings are System Roles, they control access to global features (content independent). Browser, Publisher etc - those are Item roles and they are assigned in context of report catalog items (folders, reports, etc) See docs for more http://msdn.microsoft.com/en-us/library/ms156034(v=sql.105).aspx
To summarize, use SSMS is to create or update role definition, or Report Manager to assign roles to users/items
Is there a way to add new roles to reporting services?
I'm working on a clients project and it requires a custom role in Reporting Services. I can't find any page in my http://localhost/reports that will allow me to configure a new role. I can only assign users and groups to existing roles.
I looked in the [ReportServer].[dbo].[Roles] table of my database and found the current roles but I'm not sure what some of the columns do/mean so I don't want to just go adding a new record.
You can certainly create new roles:
https://learn.microsoft.com/en-us/sql/reporting-services/security/role-definitions-create-delete-or-modify?view=sql-server-2017
This is done through a seldom-used feature of SSRS: you connect to SSRS through the SQL Server Management Studio (SSMS) by specifying a server type of "Reporting Services"