Granting access in SSRS to reports

Before you provide reports to your users, you need to give them the appropriate access within the Microsoft SQL Server Reporting Services application. You use the SSRS role-based security to assign Active Directory users and groups to SSRS roles for both the site and folders.

Anyone reading reports will also need to configure their Internet Explorer installation, as mentioned in Adding your report services web site to your Internet Explorer trusted sites.

Please consult Microsoft documentation for the most current instructions for security configuration and granting access in SSRS. For example, some information can be found at this link:

https://docs.microsoft.com/en-us/sql/reporting-services/report-server/configure-a-native-mode-report-server-for-local-administration-ssrs?view=sql-server-2016

However, for your convenience, a couple procedures are below.

To grant report administrator access in SSRS (SQL Server Reporting Services):

  1. Run Internet Explorer as Administrator.
  2. In Internet Explorer, go to your Report Manager URL.

    You can open the Microsoft Reporting Services Configuration Manager to view the Report Manager URL.

    Internet Explorer opens SQL Server Reporting Servies to your Report Manager URL.

  3. Click Site Settings, and create a new role assignment so that you can assign the desired Active Directory group to the “System Administrator” role in SSRS.

    To create a new role assignment, click Security, then New Role Assignment.

  4. Enter the group or user name (in the domain\username formet), select System Administrator, and click OK.
  5. Click Home, and then click Folder settings. From there, create a new role assignment so that you can grant access to the “Content Manager” role.

  6. To grant access so that the user can edit or build reports, you can give them additional permissions in SSRS, such as the Report Builder permission to the Home folder.

To grant report read access in SSRS (an overview):

  1. In SSRS, go to Site Settings, and create a new role assignment so that you can assign the desired Active Directory group to the “System user” role in SSRS.

    By default, all authenticated users are assigned to the System User role.

  2. In SSRS, go to the Home folder, and then click Folder settings. From there, create a new role assignment so that you can grant access to at least the “Browser” role.

  3. To grant access so that the user can edit or build reports, you can give them additional permissions in SSRS, such as the Report Builder permission to the Home folder.