CODEWITHSUNDEEP
reporting-servicesreportingreportingservices-2005
jbcedge
jbcedge

Reputation: 19505

The permissions granted to user ' are insufficient for performing this operation. (rsAccessDenied)"}

I created a report model using SSRS (2005) and published to the local server. But when I tried to run the report for the model I published using report builder I get the following error.

Report execution error:The permissions granted to user are insufficient for performing this operation. (rsAccessDenied)

Upvotes: 109

Views: 466525

Answers (23)

YakovGdl35
YakovGdl35

Reputation: 349

Is a lack of privilege, you need to Grant users access to a report server in Site Settings Options and also assign privilegesin the home folder

Grant users access to a report server

  1. Go to Site Settings on the top-right Under Site settings, select Security. enter image description here
  2. Select Add group or user.
  3. Under Site settings, select Security.
  4. Select Add group or user. enter image description here
  5. For Group or user, enter a Windows domain user or group account in the following format: <account> enter image description here
  6. Click "Apply"

Grant users access to home folder

  1. Go to the report server web portal.
  2. In the upper-right corner, select the manage folder icon enter image description here
  3. Go to the 'Security' tab and click '' and add your domain user and asssign a role definition

Role definitions define a set of permissible tasks and include:

Browser Content Manager My Reports Publisher Report Builder enter image description here

Upvotes: 0

Emad Mokhtar
Emad Mokhtar

Reputation: 3297

It's because of lack of privilege for the user you are running the report builder, just give that user or a group a privilege to run report builder. Please visit this article

Or for shortcut:

  1. Start Internet Explorer using "Run as Administrator"
  2. Open http://localhost/reports
  3. Go to the Properties tab (SSRS 2008)
  4. Security -> New Role Assignment
  5. Add DOMAIN\USERNAME or DOMAIN\USERGROUP
  6. Check Report Builder

Upvotes: 106

Belladonna
Belladonna

Reputation: 308

If you have any shared datasets in a separate folder, make sure your users have access to that folder too.

Upvotes: 0

MovGP0
MovGP0

Reputation: 7755

The report might want to access a DataSource or DataView where the AD user (or AD group) has insuficcient access rights.

Make sure you check out the following URLs:

  • http://REPORTSERVERNAME/Reports/Pages/Folder.aspx?ItemPath=%2fDataSources
  • http://REPORTSERVERNAME/Reports/Pages/Folder.aspx?ItemPath=%2fDataSets

Then choose Folder Settings

Folder Settings

(or the appropriate individual DataSource or DataSet) and select Security. The user group needs to have the Browser permission.

enter image description here

Upvotes: 2

MStew
MStew

Reputation: 1275

After setting up SSRS 2016, I RDP'd into the server (Windows Server 2012 R2), navigated to the reports URL (https://reports.fakeserver.net/Reports/browse/) and created a folder title FakeFolder; everything appeared to be working fine. I then disconnected from the server, browsed to the same URL, logged in as the same user, and encountered the error below.

The permissions granted to user 'fakeserver\mitchs' are insufficient for performing this operation.

Confused, I tried pretty much every solution suggested on this page and still could not create the same behavior both locally and externally when navigating to the URL and authenticating. I then clicked the ellipsis of FakeFolder, clicked Manage, clicked Security (on the left hand side of the screen), and added myself as a user with full permissions. After disconnecting from the server, I browsed to https://reports.fakeserver.net/Reports/browse/FakeFolder, and was able to view the folder's contents without encountering the permissions error. However, when I clicked home I received the permissions error.

For my purposes, this was good enough as no on else will ever need to browse to the root URL, so I just made a mental note whenever I need to make changes in SSRS to first connect to the server and then browse to the Reports URL.

Upvotes: 4

Dhruv Patel
Dhruv Patel

Reputation: 136

I know it's for a long time ago but may be helpful to any other new comers,

I decided to pass user name,password and domain while requesting SSRS reports, so I created one class which implements IReportServerCredentials.

 public class ReportServerCredentials : IReportServerCredentials   
{
    #region  Class Members
        private string username;
        private string password;
        private string domain;
    #endregion

    #region Constructor
        public ReportServerCredentials()
        {}
        public ReportServerCredentials(string username)
        {
            this.Username = username;
        }
        public ReportServerCredentials(string username, string password)
        {
            this.Username = username;
            this.Password = password;
        }
        public ReportServerCredentials(string username, string password, string domain)
        {
            this.Username = username;
            this.Password = password;
            this.Domain = domain;
        }
    #endregion

    #region Properties
        public string Username
        {
            get { return this.username; }
            set { this.username = value; }
        }
        public string Password
        {
            get { return this.password; }
            set { this.password = value; }
        }
        public string Domain
        {
            get { return this.domain; }
            set { this.domain = value; }
        }
        public WindowsIdentity ImpersonationUser
        {
            get { return null; }
        }
        public ICredentials NetworkCredentials
        {
            get
            {
                return new NetworkCredential(Username, Password, Domain);
            }
        }
    #endregion

    bool IReportServerCredentials.GetFormsCredentials(out System.Net.Cookie authCookie, out string userName, out string password, out string authority)
    {
        authCookie = null;
        userName = password = authority = null;
        return false;
    }
}

while calling SSRS Reprots, put following piece of code 

 ReportViewer rptViewer = new ReportViewer();
 string RptUserName = Convert.ToString(ConfigurationManager.AppSettings["SSRSReportUser"]);
        string RptUserPassword = Convert.ToString(ConfigurationManager.AppSettings["SSRSReportUserPassword"]);
        string RptUserDomain = Convert.ToString(ConfigurationManager.AppSettings["SSRSReportUserDomain"]);
        string SSRSReportURL = Convert.ToString(ConfigurationManager.AppSettings["SSRSReportURL"]);
        string SSRSReportFolder = Convert.ToString(ConfigurationManager.AppSettings["SSRSReportFolder"]);

        IReportServerCredentials reportCredentials = new ReportServerCredentials(RptUserName, RptUserPassword, RptUserDomain);
        rptViewer.ServerReport.ReportServerCredentials = reportCredentials;
        rptViewer.ServerReport.ReportServerUrl = new Uri(SSRSReportURL);

SSRSReportUser,SSRSReportUserPassword,SSRSReportUserDomain,SSRSReportFolder are defined in web.config files.

Upvotes: 2

Geetanjali Sachdeva
Geetanjali Sachdeva

Reputation: 133

This worked for me- -go to the report manager, check site settings-> Security -> New Role Assignment-> add the user

-Also, go to Datasets in report manager -> your report dataset -> Security -> New Role Assignment -> add the user with the required role.

Thanks!

Upvotes: 2

Banketeshvar Narayan
Banketeshvar Narayan

Reputation: 3899

I have used following steps and it is working for me.

Open Reporting Services Configuration Manager -> then connect to the report server instance -> then click on Report Manager URL.

In the Report Manager URL page, click the Advanced button -> then in the Multiple Identities for Report Manager, click Add.

In the Add a Report Manager HTTP URL popup box, select Host Header and type in: localhost Click OK to save your changes.

Then:

  1. copied the report server URL
  2. Run Google chrome/Internet Explorer as administrator
  3. Paste URL in address bar and press enter.

it is working fine for me on Internet Explorer and Google Chrome but not for mozilla Firefox.

In case of Firefox asking for username and Password I am providing it but it is not working. I am admin and have full right.

I have done 1 more change set "User Account Control Settings" to never notify.

If you are getting such type of exception while deploying this report from Visual Studio then do the following things:

  1. Open Google chrome/Internet Explorer with administrator right.
  2. open report server URL in it.

3.Click on "New Role Assignment" add the then enter the user name and select the Roles .enter image description here

  1. click ok.
  2. Now deploy the report from Visual studio it will work and deploy the reports at specified server.

Upvotes: 6

Vijay
Vijay

Reputation: 11

Thanks for Sharing. After struggling for 1.5 days, noticed that Report Server was configured with wrong domain IP. It was configured with backup domain IP which is offline. I have identified this in the user group configuration where Domain name was not listed. Changed IP and reboot the Report server. Issue resolved.

Upvotes: 1

Soheila Hg
Soheila Hg

Reputation: 578

Make sure you have access configured to the URL http://localhost/reports using the SQL Reporting Services Configuration. To do this:

  1. Open Reporting Services Configuration Manager -> then connect to the report server instance -> then click on Report Manager URL.
  2. In the Report Manager URL page, click the Advanced button -> then in the Multiple Identities for Report Manager, click Add.
  3. In the Add a Report Manager HTTP URL popup box, select Host Header and type in: localhost
  4. Click OK to save your changes.
  5. Now start/ run Internet Explorer using Run as Administator... (NOTE: If you don't see the 'Site Settings' link in the top left corner while at http://localhost/reports it is probably because you aren't running IE as an Administator or you haven't assigned your computers 'domain\username' to the reporting services roles, see how to do this in the next few steps.)
  6. Then go to: http://localhost/reports (you may have to login with your Computer's username and password)
  7. You should now be directed to the Home page of SQL Server Reporting Services here: http://localhost/Reports/Pages/Folder.aspx
  8. From the Home page, click the Properties tab, then click New Role Assignment
  9. In the Group or user name textbox, add the 'domain\username' which was in the error message (in my case, I added: DOUGDELL3-PC\DOUGDELL3 for the 'domain\username', in your case you can find the domain\username for your computer in the rsAccessDenied error message).
  10. Now check all the checkboxes; Browser, Content Manager, My Reports, Publisher, Report Builder, and then click OK.
  11. You're domain\username should now be assigned to the Roles that will give you access to deploy your reports to the Report Server. If you're using Visual Studio or SQL Server Business Intelligence Development Studio to deploy your reports to your local reports server, you should now be able to.
  12. Hopefully, that helps you solve your Reports Server rsAccessDenied error message...

Just to let you know this tutorial was done on a Windows 7 computer with SQL Server Reporting Services 2008.

Reference Article: http://techasp.blogspot.co.uk/2013/06/how-to-fix-reporting-services.html

Upvotes: 15

user2051770
user2051770

Reputation: 764

Old but relevant issue. I solved for 2012 by logging in to the reporting server and:

  • browse to http://localhost/reports/
  • Click 'Site Settings' in the top-right (was only available when logging in to the report server)
  • Go to the 'Security' tab and click 'New Role Assignment'
  • Added my DOMAIN\USERNAME as a System Administrator

Can't say that I'm comfortable with this solution, but I needed something that worked and it worked. Hope this helps someone else.

Upvotes: 4

Atur
Atur

Reputation: 1770

Open internet explorer as administrator.

Open the reports url http://machinename/reportservername

then in 'folder settings' give permission to required user-groups.

Upvotes: 5

Ajay
Ajay

Reputation: 21

What Worked for me was:

Open localhost/reports
Go to properties tab (SSRS 2008)
Security->New Role Assignment
Add DOMAIN/USERNAME or DOMAIN/USERGROUP
Check Report builder

Upvotes: 2

Vicky
Vicky

Reputation: 31

Problem:

Error rsAccessDenied : The permissions granted to user 'User\User' are insufficient for performing this operation.

Solution:

Click "Folder Setting" > "New Role Assignment" Then type "User\User" in the 'Group or user name text box'. Check the Roles check boxes that you would want the user to have.

Upvotes: 3

Kevin Cole -MCM-
Kevin Cole -MCM-

Reputation: 23

For SQL Reporting Services 2012 - SP1 and SharePoint 2013.

I got the same issue: The permissions granted to user '[AppPoolAccount]' are insufficient for performing this operation.

I went into the service application settings, clicked Key Management, then Change key and had it regenerate the key.

Upvotes: 1

T0t3sMcG0t3s
T0t3sMcG0t3s

Reputation: 320

Just like Nasser, I know this was a while ago but I wanted to post my solution for anyone who has this problem in the future.

I had my report setup so that it would use a data connection in a Data Connection library hosted on SharePoint. My issue was that I did not have the data connection 'approved' so that it was usable by other users.

Another thing to look for would to make sure that the permissions on that Data Connection library also allows read to the select users.

Hope this helps someone sooner or later!

Upvotes: 1

Robert Bosco
Robert Bosco

Reputation: 181

Right Click Microsoft BI -> Click Run as Administrator -> either open your existing SSRS report or create your new SSRS report and then deploy your report after that complied you will be received one web URL for to view your report. Copy that URL and paste to web browser(Run as Administrator) and you will get your report view. You could use Internet Explorer, which would be essential for web service

If it is wrong means,Please forgive me since i did like this so that i just written.

Upvotes: 18

Kasey Mohsen
Kasey Mohsen

Reputation: 196

You can also make sure that the Identity in your Application Pool has the right permissions.

  1. Go to IIS Manager

  2. Click Application pools

  3. Identify the application pool of the site you are deploying reports on

  4. Check that the identity is set to some service account or user account that has admin permissions

  5. You can change the identity by stopping the pool, right clicking it, and selecting Advanced Settings...

Under Process Model is the Identity field

Upvotes: 6

Alexander Kashtalyan
Alexander Kashtalyan

Reputation: 21

Run BIDS as administrator despite of existing membership of Administrators group.

Upvotes: 0

user162362
user162362

Reputation:

I have SQL2008 / Windows 2008 Enterprise and this is what I had to do to correct the rs.accessdenied, 404, 401 and 503 errors:

  • Added NT Users to SQL Report Server Users and IIS_USR Group
  • I changed SQL Reporting Service to Local account (it was Domain with Local Admin)
  • I deleted encryption key in Reporting Services Configuration (last tab on the list)
  • and THEN it worked.

Upvotes: 5

kamal
kamal

Reputation:

under Site setting in Reports manager >Configure system-level role definitions > check ExecuteReport Defination option then Create a System UserGroup, Give the access to that group at Connect to your reporting Services Data base in server properties and add a group and permite the access as System User... It should work

Upvotes: 5

Nasser Hadjloo
Nasser Hadjloo

Reputation: 12610

I know it's for a long time ago but you (or any other new comers) can resolve this issue by

  1. Add the [Domain\User] to Administrator, IISUser, SQLReportingUser groups
  2. Delete Encryption Key in SSRS configuration tools
  3. ReRun the Database Change in SSRS configuration tools
  4. Open WebServiceUrl from SSRS configuration tools (http://localhost/reportserver)
  5. creating Reports Folder manually
  6. go to Properties of created folder and add these roles to security (builtin\users , builtin\Administrator, domain\user)
  7. Deploy your reports and your problem resolved

Upvotes: 20

CT
CT

Reputation:

What worked for me was:

  • Go to Site Setting
  • Click on "Configure site-wide security"
  • Click "New Role Assignment" button in top bar
  • Give the new role the following name "Everyone"
  • Of the available roles, grant it "System User" only
  • Click "Apply"

That should do it,

Good luck!

Upvotes: 1

Related Questions