August 6, 2010 at 1:19 pm
Hi all,
We are installing SQL Server 2008 r2 onto a server, and this installation includes Reporting Services.
SSRS works, I can deploy reports, use Report Manager, Report Builder, etc., all using my admin privs.
The problem is when NON-ADMIN users connect to \\server\reports. They get the following error:
User 'DOMAIN\user' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.
This error is resolved by giving the DOMAIN\user account local admin privs on the server.
Granting admin privs is not a working solution. We have accountants and other non-technical people that will use Report Manager and Report Builder. We can't give admin privs to non-technical users on the production SQL server.
I have done a lot of research on the web... I see a results involving earlier versions of SQL Server and Report Manager, but this is 2008 r2 - different webserver, etc.
How can I resolve this issue?
Thank you for any ideas.
August 9, 2010 at 12:55 pm
I am not 100% sure if this will meet your needs. The following is what i do in my setup.
When the Report URL is clicked, username/password will be prompted as part of Authentication (in the absence of customer authentication such as Forms authentication). For this purpose it is recommended that Windows group (eg) DOMAIN\Report_Users_Group is created and the relevant Windows logins are associated with this Group. This should be done by the Windows Administrator.
Subsequently , click on the Properties tab in the SQL Server Reporting Services URL and click the New Role Assignment and enter the “Group or user name” as Domain\Report_Users_Group, check the “Browser – May view folders, reports and subscribe to reports.” Option. For BUILTIN\Administrators the role shall be “Content Manager - May manage content in the Report Server. This includes folders, reports and resources.”.
Hope this helps.
August 10, 2010 at 2:36 pm
gk-411903 (8/9/2010)
The following is what i do in my setup.When the Report URL is clicked, username/password will be prompted as part of Authentication (in the absence of customer authentication such as Forms authentication). For this purpose it is recommended that Windows group (eg) DOMAIN\Report_Users_Group is created and the relevant Windows logins are associated with this Group. This should be done by the Windows Administrator.
Subsequently , click on the Properties tab in the SQL Server Reporting Services URL and click the New Role Assignment and enter the “Group or user name” as Domain\Report_Users_Group, check the “Browser – May view folders, reports and subscribe to reports.” Option. For BUILTIN\Administrators the role shall be “Content Manager - May manage content in the Report Server. This includes folders, reports and resources.”.
Hope this helps.
Thank you.
I am not sure this is the same issue - you are talking about 3 different things. Username/password, creating an AD group, and adding a user/group to Report Manager for permissions.
Yes, adding a user/group to Report Manager fixes the problem - SOMETIMES. (Groups are not being recognized when RDP'ed into the server, and I have to add users individually)
What I'm having trouble with now is the username/password prompt. No matter what I type in, it gives me 3 dialog boxes and then shows a blank page.
Any ideas how to get past this?
Jason
August 11, 2010 at 4:32 am
UAC is causing the error, from http://support.microsoft.com/kb/934164.
1.Configure the report server for local administration. To access the report server and Report Manager locally, follow these steps:
2.Start Windows Internet Explorer.
3.On the Tools menu, click Internet Options.
4.Click Security.
5.Click Trusted Sites.
6.Click Sites.
7.Under Add this Web site to the zone, type http://<var>ServerName</var>. If you are not using HTTPS for the default site, click to clear the Require server certification (https:) for all sites in this zone check box.
8.Click Add.
9.Repeat step 7f and step 7g to add the http://localhost URL, and then click Close.
10.Note This step enables you to start Internet Explorer and open either the localhost or the network computer name of the server for both the Report Server application and the Report Manager application.
11.Create role assignments that explicitly grant you access together with full permissions. To do this, follow these steps:
12.Start Internet Explorer together with the Run as administrator option. To do this, click Start, click All Programs, right-click Internet Explorer, and then click Run as administrator.
13.Open Report Manager. By default, the Report Manager URL is http://<var>ServerName</var>/reports.
If you use a named instance of Reporting Services, the Report Manager URL is http://<var>ServerName</var>/reports$<var>InstanceName</var>
14.In the Home dialog box, click Properties.
15.Click New Role Assignment.
16.Type a Windows user account name by using the following format:
<var>Domain</var>\<var>User</var>
17.Click to select the Content Manager check box.
18.Click OK.
19.In the Home dialog box, click Site Settings.
20.Click Configure site-wide security.
21.Click New Role Assignment.
22.Type a Windows user account by using the following format:
<var>Domain</var>\<var>User</var>
23.Click System Administrator.
24.Click OK.
25.Close Report Manager.
26.Use Internet Explorer without the Run as administrator option to reopen Report Manager.
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply