HTML5 Development

Report Server Role Management in SSRS

Microsoft Sequel Server Reporting Services (SSRS) provide us with a role management functionality which helps us in enhancing its security. For every user we can define its role and accessibility in a well defined manner.

For configuring roles use Report Manager to assign users to a role. This role management works at two levels:

  • Item-level roles: Item level roles are user to manage report server content and report processing. Item-level roles are defined on the root node (the Home folder) or on specific folders or items farther down the hierarchy.
  • System-level roles: In System level roles there is no restrictions in terms of specific folder or an item .It grant access to site-wide operations. For e.g. using Report Builder and other such accesses.

Both the types are good enough to be used together. That is why, adding a user to a report server is a two-part operation. It means if you assign a user to an item-level role, you should also assign them to a system-level role. When assigning a user to a role, you must select a role that is already defined.

Before we proceed

Let us go through following list before we add users to a report server.

  • You must be an Administrator on the computer where report server is configured.
  • If you want to add more users then you must map user accounts (Administrator) to Content Manager and System Administrator roles (if not mapped by default) because only users who have “Content Manager” and “System Administrator” permissions can add users to a report server.
  • Report server can be accessed by both users with Administrator account as well as Standard User Account.

Note: “Site Settings” option (top right of the screen upon starting Report Manager) will be only visible to the user with “Administrator” Account and not to the user with “Standard” Account.

Let us begin

System role – To add a user/group to a system role

  1. First start Report Manager (SSRS).
  2. Now click on Site Settings (top right of the screen).
  3. After that click on Security.
  4. Then click on New Role Assignment.
    ssrs-role-assignment1 Report Server Role Management in SSRS
  5. In Group or user name, enter a user or group account (Windows domain) in this format: <domain name><account name>.
  6. After that select a system role, and then click OK.
    Both the roles can be selected as well, if selected; a user or group will be able to perform the tasks in both roles.
    ssrs-role-assignment-details Report Server Role Management in SSRS
  7. Repeat above steps for adding more users or groups.

Item role – To add a user/group to an item role

  1. First Start Report Manager (SSRS) if not already started.
  2. Now click on Folder Settings.
    folder-settings-ssrs Report Server Role Management in SSRS
  3. After Folder Settings click on Security.
  4. Followed by New Role Assignmentnew-role-assignment-ssrs Report Server Role Management in SSRS
  5. In Group or user name, enter a user or group account (Windows domain) in this format: .
  6. In the given example, the domain name is “Enterprise” and user name is “test1”, so in Group or username field “Enterprisetest1” is used.
  7. Select role definitions (you can select one or more) that describe how the user or group should access the item, and then click OK.
    ssrs-role-assignment-details1 Report Server Role Management in SSRS
  8. Now go back to Home and look for the report item for which you want to add a user or group.
  9. Hover over on the item, and click on the drop-down arrow.
  10. Now in the drop-down menu, click Security (as shown below)
    ssrs-security Report Server Role Management in SSRS
  11. After this click New Role Assignment. (Before that you might need to click Edit Item Security in the toolbar to change the security settings.)
    ssrs-new-role-security Report Server Role Management in SSRS
  12. In Group or user name, enter a user or group account (Windows domain) in this format: .
  13. For e.g. my machine’s domain name is “Enterprise” and user name is “test1”, so in Group or username field I have written “Enterprisetest1”.
  14. Select role definitions (you can select one or more) that describe how the user or group should access the item, and then click OK.

Repeat above steps for adding more users or groups.


0 replies

Leave a Reply

Want to join the discussion?
Feel free to contribute!

Leave a Reply

Your email address will not be published. Required fields are marked *