March 27, 2018 at 4:21 am
Hi,
I want users to see few reports which they have access, this is working fine when I open SSRS URL on the report server, but when I open the same URL in user local machine, the user can see all folders and reports from home button.
Suggest me if anyone of you got into the similar situation.
Thanks, Ven
March 28, 2018 at 3:55 pm
mssqlchat - Tuesday, March 27, 2018 4:21 AMHi,I want users to see few reports which they have access, this is working fine when I open SSRS URL on the report server, but when I open the same URL in user local machine, the user can see all folders and reports from home button.
Suggest me if anyone of you got into the similar situation.Thanks, Ven
The security is the same no matter where it is run. The permissions are pulled from the ReportServer database so they are the same for a report server. So the differences is likely due to how you were verifying things.
To just access the URL, the users need site level permissions. As an SSRS Administrator, click on site settings on the home page, go to security and the user should be setup as a System User.
At this point they would still get errors when they access the URL since they don't have access to see anything. So again as an SSRS System Administrator, on the home page click on the Folder Settings button on that bar just above where all of the folders are listed. This is what allows them to see the items on that page - the folders when on the home page. So add the user there with whichever role you plan on using for the folders.
From this point and onto all the other levels, you are dealing with item level security. What ever you grant to a user at this highest folder level (and you need to grant something), all of the permissions are inherited from this top level. So the user has the role you selected with the folders and it is inherited down to all of the folders and items in all folders. So for the individual access and not seeing some folders you have to break the inheritance.
To control who sees what, you would need to go to the other folders you don't want the user to see on that home page and select Security from the drop down for that folder. Then you need to remove that user from the folder you don't want them to see. Put a check mark in the box by the users name, select delete, You get some message about breaking the inheritance and is that what you want to do, select yes and the user is deleted. The inheritance is broken so they don't see that folder (or any of the items in that folder).
Sue
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply