The permissions granted to user 'domain\abc' are insufficient for performing this operation. (rsAccessDenied)

  • ok, so I know there are tons of forums on this,but none are helping. I'm using SQL server 2014 and have the report server setup in native mode. I'm trying to get this domain user 'abc' (changed from real login to protect the account, etc) to be able to access the reportserver web url to run reports...i get the rsaccessdenied everytime....the only way around this is if I add the user into the local administrator group, which is not an option. I have no issue at all running the report manager or report web url if I sign into the browser with a user that is in the report server local admin group.

    Before you answer, here is what I have tried:

    1) UAC turned off on server

    2) web url entered as trusted site

    3) run IE as admin

    4) configured site settings on local admin account from report server as follows:
    •site settings have abc user entered as system administrator ( i know this is overboard, but still doesnt work)
    •under the actual report folder on the 'home' page, when you choose security, I have abc user as browser, content manager, my reports, publisher, and report builder (once again overkill, but still doesnt work).

    5) tried extremes such as adding user into sql database logins as sysadmin, tried creating a new local user group and inserting the abc user into that group and then adding that group to the site settings and report settings, nothing.

    here is one strange thing, when i go to the report manager url and sign in as user abc, it gives me the error, but i can see the site settings option at the top and actually click into and see those properties (general, security, schedules) so that tells me the abc user has some sort of rights, but cannot see the 'home' page of the report manager site (and of course cannot see anything on the report server url link, just the permissions error).

    any other suggestions would be greatly appreciated. I am running windows server 2012 and installed using the local administrator account. once again, I have no issues navigating any of the urls as long as the user is in the local administrator group.

  • Have you granted access to the root folder of the reports site using folder settings (not site settings)

    Also have you switched UAC off at the client side also?

  • I have turned off UAC on the client, but have not granted access to the root folder...would you be talking about the path such as c:\program files\microsoft sql server\ msrs12.reports ?

  • SSRS is a little wierd, you have to assign permissions in two places, at the site, and at the root folder, the screenshot here is from an older verison, but the logic is still the same, even in 2016;
    does this help?

    Lowell


    --help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!

  • ok, so this will sound super stupid, but the answer was to click folder settings (thank you lowell)....I was actually clicking on the uploaded report folder and giving permissions there...i thought folder settings corresponded to the report you had highlighted, not the page as a whole....

    I set on site settings and here (individual folders instead of folder settings):

  • mes1982 - Tuesday, May 2, 2017 7:52 AM

    ok, so this will sound super stupid, but the answer was to click folder settings (thank you lowell)....I was actually clicking on the uploaded report folder and giving permissions there...i thought folder settings corresponded to the report you had highlighted, not the page as a whole....

    I set on site settings and here (individual folders instead of folder settings):