Required user permissions for report services

Before you install Centrify report services, be sure you have the appropriate software and user accounts, which includes the following:

  • Users with required permissions. Before installation, you must have users to run the Centrify installer.
  • Report service account
  • SQL Server service account (this is needed if you’re installing using an existing instance)
  • User accounts that can run the Report Configuration Wizard and the Reporting Control Panel.

There are a few user accounts that you need to set up for use with Centrify report services. Here is a summary of the user accounts that you need to create and the permissions you need to explicitly grant.

Report services account permissions
User type Required Active Directory permissions Required security policy permissions(group policy, or local policy) Required SSRS permissions Required SQL Server or PostgreSQL permissions

report service account

to run the Reporting Service

For domain-based reporting: Replicating directory changes at the domain level (ADUC)

and replicate directory changes in ADSI

 

For zone-based reporting: Read permission

Log on as a service

 

 

SQL Server service account

to run SQL Server

n/a

Log on as a service

 

 

PostgreSQL service account

 

 

 

the account must have Create Database permission

report admin

to run the Report Configuration wizard or the Upgrade & Deployment wizard and deploy reports to an existing SQL Server instance

needs to be a member of the domain

n/a

Folder Settings > Content Manager role

member of the securityadmin role

(At the very least, the user needs permission to connect to SQL Server and create a database.)

report admin

to modify the Reports Control Panel

Read permission to the domain root object of the selected domain.

Read permission to all computer objects in the selected domain.

n/a

 

  

Report viewer

to view reports from SSRS/Internet Explorer

 

 

Site settings > System user role

Folder settings > browser

(assign SSRS roles to Active Directory group or users)

 

Report writer

read, write, edit access for reports, in addition to the permissions needed to view reports

 

 

Site settings > System user role

Folder settings > Content Manager role

(assign SSRS roles to Active Directory group or users)

 

Note:   Centrify Report Services requires administrator permission to install and upgrade. That also means that only an administrator can uninstall and repair Centrify Report Services. (Ref: CS-40808a)