yes you can , but all teh sqls in data set shluld be stored procs. then u can pass username and password as a parameters to the report.