When I try to deploy reports to a newly installed SSRS 2005 server (remote server) I get the following error in VS2005:
The permissions granted to user 'CEINTERNAL\IUSR_COMPELLENT01' are insufficient for performing this operation.
What permissions are needed to deploy a report project in VS2005?
Assign either the Admin or Publisher role to CEINTERNAL\IUSR_COMPELLENT01 to the root folder in the Report Manager hierarchy.
Hope this helps,
Bill
Related
I've got an ssrs report server setup and the data sources are set to use the user's windows login. However when I try to setup a subscription it says it can't because the credentials aren't stored in the data source. Is there no way to have a subscription that uses a generic account but when run interactively it uses Windows username
I use a database account for running all of the reports. You'll have to set this up in each database. Then I have report folder permissions associated to Active Directory groups. I also use a domain service account for deploying the reports and setting up the subscriptions. That way if a member of the BI team leaves the company and their account is deactivated the subscription will still run.
Data Source Example:
I want to display SSRS reports with integrated mode in share point.
But when I set report server url in Share point then getting below error
The permissions granted to user 'XXXX' are insufficient for performing this operation. ---> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'XXXX' are insufficient for performing this operation.
I am using windows credential user and have admin permission.
For connecting SSRS with Share point, you have to follow steps in share point
1. Create Service account for SSRS
2. Set Shared database setting in SSRS application
Then you have to pass the Share point URL into the VS project of SSRS under Deploy setting.
Quite a common ommision in SSRS setup is the provision of the SSRS Execution Account. might be worth confirming you have this setup.
Technet - SSRS Execution Account
I'm trying to access the Reporting Services 2005 Report Manager locally on a Windows Server 2003 server and I'm getting the following error:
Access to the temp directory is denied. Identity 'DOMAIN\login'
under which XmlSerializer is running does not have sufficient
permission to access the temp directory. CodeDom will use the user
account the process is using to do the compilation, so if the user
doesnt have access to system temp directory, you will not be able to
compile. Use Path.GetTempPath() API to find out the temp directory
location.
The DOMAIN\login given in the error message is my user login account. The Reports virtual directory in the Default Web Site is configured to use the DefaultAppPool which is configured to run as the Network Service identity. The SQL Server Reporting Services windows service is configured to use a separate domain service account.
Grant the NETWORK SERVICE account read/write/modify access to the C:\WINDOWS\Temp directory.
My SQL Server Windows service is set to use the NETWORK SERVICE account.
The server is installed to C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL.
However looking at the permissions on that folder, NETWORK SERVICE does not have any permissions. The groups which are allowed access to that folder are...
CREATOR OWNER - who is this?
SYSTEM - sounds fine - so that Windows can access the folder I presume?
SQLServerMSSQLUser$Computer_Name$MSSQLSERVER - this is the interesting one - what is this?
Administrators
Users
If NETWORK SERVICE is a user with minimal permissions on the system and looks to the O/S as someone connecting from a network how does it have permissions to access any files in the SQL Server install folder?
Thanks.
See Setting Up Windows Service Accounts in the SQL Server documentation:
SQL Server uses a security group to set resource ACLs rather than using the service account directly, so changing the service account can be done without having to repeat the resource ACL process. The security group can be a local security group, a domain security group or a service SID.
During SQL Server installation, SQL Server Setup creates a service group for each SQL Server component. These groups simplify granting the permissions that are required to run SQL Server services and other executables, and help secure SQL Server files.
Depending on the service configuration, the service account for a service or service SID is added as a member of the service group during install or upgrade.
That's what SQLServerMSSQLUser$Computer_Name$MSSQLSERVER is.
About NetworkService Account:
The NetworkService account is a predefined local account used by the service control manager.
...
A service that runs in the context of the NetworkService account presents the computer's credentials to remote servers.
NOT, as you put it:
looks to the O/S as someone connecting from a network
I'm trying to configure Reporting Services on a dev server so we can use it for development, but it is not working out for me. When I try to access the Reports page, I get the following error:
User 'ServerName/UserName' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.
I'm not sure what I need to do to fix this, does Reporting Services need a virtual directory? If so, does anybody have a link on how to configure it? When I created the ReportingServices database, it made me a dbo by default, I'm a sysadmin on sql Server, so the permissions should be good.
I'm running sql server 2008 R2
I figured this out by going to the report manager on the server hosting reporting services by using the link http://localhost/reports. Once I was there then I clicked on home and configured the permissions.
Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.
If you are running IE on the server on which you installed SSRS, make sure that you right click and run IE as administrator.
Have you tried this from other machines? IF you are getting the same results from multiple machines, then go through the steps in Start -> All Programs -> Microsoft SQL Server 2008 R2 -> Configuration Tools -> Reporting Services Configuration Manager. Here you can reset most of the basic SSRS configuration.
You don't need a virtual directory: SSRS no longer uses IIS: it is built directly on http.sys.