Reporting Services Permissions

  • Hi all

    I've just finished altering the way our reporting services reports are going to be viewed by end-users.

    At the moment, every report can be seen by every user (which is not good).

    All the reports are in a sub-sub-folder (fairly buried) and not just a sub-folder (which is going to change).

    I'm trying to find a way of copying all users current permissions to the parent folder so they can see all the folders.

    After that's done, I can go through each of the new sub-folders and restrict the reports so they can only be viewed by the people that need them (unless I can do this by adding them to a group other than an AD group over which I have no control).

    As an example:-

    Current layout

    \DataWareHouse\DataQuality\Report1 can be viewed by everyone as they all have access to the DataWareHouse folder and all the sub-folders have inherited permissions.

    I want everyone to be able to see all reports in the root folder but only have access to the folders they need.

    Anyone any ideas for a quick way of doing this?

    All help gratefully received.

  • Permissions in SSRS are tedious, but can be easily set. The things to remember is the security structure in inherited....so what is set at the "top" level is granted all the way down to the very last folder in the tree.

    That being said I would set the "base" permission level from the default view in SSRS, this would include the accounts that can see which folders across the board. This access should be granted as "Content Manager".

    From there you can set further permissions on each individual folder. You will notice on each sub folder that there are no "check" boxes next to the accounts (this is because they are all inherited). If no specific changes are needed then leave it this way.

    If you need to override the security, you can do so at each folder level you want custom permissions set.

    Make sense?

    ______________________________________________________________________________Never argue with an idiot; Theyll drag you down to their level and beat you with experience

  • You are so very right, that's the single biggest issue when coming to SSRS. PERMISSIONS issues...

  • I find the easiest way to set up permissions in SSRS is to write it down on a blank sheet of paper first...it's so much easier to visually map it out!

    ______________________________________________________________________________Never argue with an idiot; Theyll drag you down to their level and beat you with experience

  • I've already got the permissions mapped out but they are on the wrong folder.

    I basically need to move all the permissions up one level before I start restricting things on the sub-folders and reports.

    I was hoping there was an easy way to do this but it seems not.

  • I found the Reporting Services database on the relevant server but I'm not sure what I can alter (if anything) in there to get to what I need.

    Anyone any ideas?

  • You might get more answers if you post in the Reporting Services forum. I think you can ask the Forum Moderators to move posts.....

  • Thanks for that, I'll post the questuion in the SSRS forum with a link pointing to here.

    Any ideas how I get the MODS to move the posts?

  • richardmgreen1 (2/21/2014)


    Thanks for that, I'll post the questuion in the SSRS forum with a link pointing to here.

    Any ideas how I get the MODS to move the posts?

    Not sure. You could try 'Reporting' your own post(!) by clicking the Report button and explain the reason......

  • Just reported my own post (bet that's a first for the mods!).

    Have to wait and see what happens now.

  • richardmgreen1 (2/20/2014)


    I've already got the permissions mapped out but they are on the wrong folder.

    I basically need to move all the permissions up one level before I start restricting things on the sub-folders and reports.

    I was hoping there was an easy way to do this but it seems not.

    To the best of my knowledge, you will need to revert the changes/reset the changes on the folder that is incorrect. If you mapped everything out properly in the beginning you should be able to simply choose "Revert to Parent Security". I believe this has to be done manually from the web service (I don't believe it is possible in the database itself).

    To clarify from one of my prior posts: Set the most basic security from the most top-level folder (to inherit down to all sub-folders), then start overriding the security on each sub-folder below it.

    It sucks I know, but there it is 🙁

    ______________________________________________________________________________Never argue with an idiot; Theyll drag you down to their level and beat you with experience

  • Unfortunately I didn't set it up, I'm just having to tidy it up :crying:

    Looks like I'll have to do this the long way round then.

    Thanks for the input.

Viewing 12 posts - 1 through 11 (of 11 total)

You must be logged in to reply to this topic. Login to reply