SSRS: Manage Permissions in Reporting Service
In this article, we will answer the below related SSRS permissions (Native Mode) questions:
What are the role categories in SSRS?
In SSRS, there are two categories of roles:
- System-level role assignments
- Item-level role assignments
System-level role assignments
System-level role assignments are used to provide global tasks to the reporting server site as a whole. it includes the below roles:
- System Administrator Role is a predefined role for a report server administrator who has full responsibility for a report server, it includes tasks like View and modify system role assignments, system role definitions, system properties, and shared schedules.
- System User Role is a predefined role to allow users to view basic information about the report sever like View system properties, shared schedules, and run the Report Builder or other clients that execute report definitions.
https://gallery.technet.microsoft.com/site/view/file/184980/1/System%20Role%20In%20SSRS.png
Item-level role assignments
Item-level role assignments describe tasks that apply to content, it includes the below roles.
- Browser: May view folders, reports and subscribe to reports.
- Content Manager: May manage content on the Report Server. This includes folders, reports, and resources.
- My Reports: May publish reports and linked reports; manage folders, reports and resources to users My Reports folder.
- Publisher: May publish reports and linked reports to the Report Server.
- Report Builder: May view report definitions.
https://gallery.technet.microsoft.com/site/view/file/184981/1/Item%20Role.png
How to create a custom permission role?
You can't add a custom system or item level role via Report Manager, to be able to add a custom system or item level role, you should have access to the "Report Server" via SQL Server Management Studio.
- Run SQL Server Management Studio as administrator
- Select the Reporting Service as a server type.
- Provide the Report Server name, the correct credentials > then click Connect.
- Expand Security > expand Role or System role as you prefer.
- Right-click, Add new role.
- Provide an appropriate name and description to your custom role.
- Check the custom role based on your requirements > Click OK.
- Now, go back to open the report manager, check the newly created custom role.
%20restrictions%20have%20been%20addressed.gif){kind=link}
How to grant access to users in a new SSRS installation?
After installing and configuring SQL Server Reporting Service. if you tried to open the Report Manager URL, you may get the following error:
User does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.
%20restrictions%20have%20been%20addressed..png){kind=link}
As it is shown in the error message above, the current user is not authorized to access Report Manager URL, in the next section we will show How to grant access to users in SSRS.
Prerequisites
- You must be member of the local administrator group on the SSRS server.
- Add the Report Manager URL to Local Intranet Zone.
- Run Internet Explorer as Administrator.
- Browse your Report Manager URL.
Steps
To provide access to users to use the Report Manager tool, you should do the following:
- As a local administrator, open the IE as administrator then browse the Report Manager URL.
- Click Folder Settings > New Role Assignment.
- Type the Group name or the username.
- Check the required role as you prefer.
https://gallery.technet.microsoft.com/site/view/file/184982/1/Grant%20Permission%20In%20SSRS.gif
How to enable the user to run the Report builder to build new reports
You should provide them with a system user as the following:
- As a local administrator, open the IE as administrator then browse the Report Manager URL.
- Click Site Settings > Security > New Role Assignment.
- Type the Group name or the user name > Check the System User.
How to assign a specific permission to a specific item
- Click the arrow beside the item > Security.
- Click Edit Item Security to break the inheritance from the parent.
- You can inherit the parent security again by clicking on Revert to Parent Security
- Click new role Assignment > Provide the role for a specific item as you prefer.
Note: To enable the current user to manage permission for a specific folder, you should provide him a "Content Manager" role.
Applies To
- Reporting Service 2014.
- Reporting Service 2012.
- Reporting Service 2008.