SSRS 2016 permissions issue

Question

SSRS 2016 permissions issue

richardmgreen1

SSChampion

Points: 10302
More actions
November 22, 2018 at 6:20 am

#373088

Hi all
I've got a bit of a conundrum.
I need to be able to allow people to create subscriptions on reports but I don't want to give them full admin access.
As things are now, we have an AD group with the following permissions:-
Browser
My Reports
Publisher
Report Builder
Members of this group can create their own reports and publish them (which is fine) but they can't create subscriptions (except to themselves).
I need to allow them to create subscriptions which will send these reports to a list of users.
I did try creating a new role on SSRS (I called it Create Subscriptions) and gave it the following permissions:-
Manage Individual Subscriptions
Manage All Subscriptions
This doesn't appear to have the desired effect as the user I'm testing with still cannot create a subscription to go to a list of users.
The only thing I haven't done so far is restart the SSRS service.
Two questions:-
1) Am I doing this right?
2) Is an SSRS service restart needed?
Any help on this would be greatly appreciated.
::edit::
Just checked the System Role options (in case it was a system role I needed to create) but I can't see anything obvious in there.

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply

Sue_H SSC Guru Points: 90860 More actions · Answer 1

richardmgreen1 - Thursday, November 22, 2018 6:20 AM
Hi all
I've got a bit of a conundrum.
I need to be able to allow people to create subscriptions on reports but I don't want to give them full admin access.
As things are now, we have an AD group with the following permissions:-
Browser
My Reports
Publisher
Report Builder
Members of this group can create their own reports and publish them (which is fine) but they can't create subscriptions (except to themselves).
I need to allow them to create subscriptions which will send these reports to a list of users.
I did try creating a new role on SSRS (I called it Create Subscriptions) and gave it the following permissions:-
Manage Individual Subscriptions
Manage All Subscriptions
This doesn't appear to have the desired effect as the user I'm testing with still cannot create a subscription to go to a list of users.
The only thing I haven't done so far is restart the SSRS service.
Two questions:-
1) Am I doing this right?
2) Is an SSRS service restart needed?
Any help on this would be greatly appreciated.
::edit::
Just checked the System Role options (in case it was a system role I needed to create) but I can't see anything obvious in there.

For data driven subscriptions, I believe they would also need Manage Reports permissions.

Sue

richardmgreen1 SSChampion Points: 10302 More actions · Answer 2

Hi Sue

These are subscriptions that are ruin on a timed schedule if that helps.

Sue_H SSC Guru Points: 90860 More actions · Answer 3

richardmgreen1 - Wednesday, November 28, 2018 2:18 AM
Hi Sue
These are subscriptions that are ruin on a timed schedule if that helps.

I think it's still needed if these aren't their own subscriptions. Did you try it?

Sue

Thom A SSC Guru Points: 99126 More actions · Answer 4

Sue_H - Tuesday, November 27, 2018 2:51 PM
For data driven subscriptions, I believe they would also need Manage Reports permissions.
Sue

Sue is right, this is mentioned in the documentation Create, Modify, and Delete Data-Driven Subscriptions.

Before you can create a data-driven subscription, ensure that you satisfy the following requirements:
...
User requirements. The author of the subscription must have permission to "Manage reports" and "Manage all subscriptions." For more information about item-level task permissions, see Tasks and Permissions. The author must also have the necessary credentials to access the external data source that contains subscriber data.

Thom~

Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does.
Larnu.uk

richardmgreen1 SSChampion Points: 10302 More actions · Answer 5

Thanks folks

I'll add that permission and see what happens.