June 13, 2012 at 2:35 am
Hi
I am in the process of migrating my Report Server to a new Server. I have performed a backup and restore of the ReportServer and ReportServerTempDB Databases.
I have also updated the dbo.Users with the new Windows SID from the new Server. When I query the PolicyUserRole I can see that my users have access to all the Reports however they cannot log to http://<server>/ReportServer.
When I check the "Folder Settings" it does not contain the list of Users. If I add one manually this User can then see the Reports.
Could someone point me in the right direction as to where the "Folder Settings" gets it's information from?
Cheers
June 13, 2012 at 2:54 am
Did you backup and restore the reporting services encryption keys?
June 13, 2012 at 3:24 am
Hi
I did indeed.
Following the restore of both Databases I have
- deleted the encryption via the configuration tool
- restore the encryption key via the configuration tool
Still no joy.
Cheers
June 13, 2012 at 3:43 am
Strange, as SSRS uses the SIDS of the accounts so moving from one server to another shouldnt cause any issues with users, unless something has magically changed in your AD environment as well.
You say you updated the SID, what exactly did you update?
One thing I noticed is that you are passing people to ReportServer and not Reports, is there a reason for this?
June 13, 2012 at 3:59 am
As the Users have new login on the new Server I have updated their SID in the dbo.Users Table using the SUSER_SID function.
When I connect to http://<server>/Reports and go to the Folder Settings I can't see the list of my Users.
When such User tries to access the http://<server>/ReportServer webpage they are not allowed to see the Reports and get an error message unless I set them up again via the "Folder Settings" page.
I have granted such access to a User which was already existing and running the following query I get 2 records.
select *
from dbo.Users as u
inner join policyuserrole as pur on pur.userid = u.userid
inner join Policies as p on p.PolicyID = pur.PolicyID
inner join Roles as r on r.RoleID = pur.RoleID
where UserName like '%<user1>'
When I revoke the access only 1 line remains.
Now All the details are the same apart from the PolicyId. The Policy is linked to the same Role however only when I create a new record in the PolicyUserRole Table that the User can access the Reports.
I now wonder if I need to recreate the entries in this Table using the UpdatePolicyPrincipal stored procedure for each of my Users.
June 13, 2012 at 4:01 am
So your using local accounts on the SSRS server, rather than AD accounts?
The catalog table links to polices, and the catalog is the folder structure you see in SSRS.
Also ReportServer is the management area, users should be going to Reports, not ReportServer.
June 13, 2012 at 4:15 am
We're moving to the Cloud so the Users will change Domain, ... that's the reason behind updating the SID.
I'll have a look at the Catalog Table.
Our Server is configure the other way round so Users access the Reports via ReportServer and we administer via Reports.
Thanks for your help and the time you spend helping me.
Cheers
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply