Minimum SQL database permissions required to use impersonation on SSRS data source connection?

  • Hi

    I am currently encountering the following error when I try to specify a datasource from SSRS to SQL Server db (2008) using "credentials that are stored securely in the server" - this is specified as a windows account "s2\killian" with the option to "impersonate the authenticated user after a connection has been made" checked.

    Msg 15157, Level 16, State 1, Line 1 Setuser failed because of one of the following reasons: the database principal 's2\killian' does not exist, its corresponding server principal does not have server access, this type of database principal cannot be impersonated, or you do not have permission.

    Obviously this method of impersonation uses the SetUser() function behind the scenes and the MSDN documentation states that dbowner permissions are required in order to use this function. However I am getting the above error when using dbowner. I am not in a position to use sysadmin because of security policy. The database principal does exist and can impersonate using when assigned sysadmin.

    Does anyone know how to get this mechanism of authentication and impersonation working without assigning sysadmin priveleges on the SQL Server database to the windows account used by the SSRS data source?

    Is there a way of getting SetUser() to work without sysadmin priveleges?

    Thanks

    Killian

  • View the following website URL.

    http://msdn.microsoft.com/en-us/library/ms160330.aspx

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply