Groups | Blog | Home
all groups > sql server reporting services > june 2006 >

sql server reporting services : IUSR_Machine account permissions in Report Builder


Chris
6/28/2006 2:01:52 PM
We have an ASP.NET application using Forms authentication which
launches the Report Builder via an HTML link with the href set to:

ReportServer/ReportBuilder/ReportBuilder.application

This will launch Report Builder and allow users to create, modify, and
save reports. But when the user tries to run the report, the above
error message comes up. Just for testing purposes, I tried adding the
IUSR account to the Administrators group but still with the same
result. It seems that everything we try still leads us to the
following error message:

The permissions granted to user '<domain>\IUSR_<machine>' are
insufficient for performing this operation. (rsAccessDenied)

After days of searching for a resolution to this I'm still unsure
about how to fix it. If anyone could give some advice or maybe provide
a link that explains how to resolve the situation we would be sincerely
grateful.

Thanks in advance!
si.downes NO[at]SPAM gmail.com
6/29/2006 9:38:43 AM
I'm encountering the same problem. Launching Report Builder from the
URL and authenticating the forms user, I can create a report and
save/deploy to the server but can't view it through Report Builder.

Also, Report Builder icon doesn't display in Report Manager when using
forms authentication for any user other than the default admin user.
I'll be writing an ASP.NET app to launch and deploy Report Builder but
it would be nice to have the icon in Report Manager

[quoted text, click to view]
Chris
6/29/2006 11:06:03 AM
So have you had any luck with any kind of work-around? It's driving me
crazy and I have a client very anxious to start using it.

Chris


[quoted text, click to view]
si.downes NO[at]SPAM gmail.com
7/3/2006 1:55:23 AM
Still no solution!!

Noticed in your error message the failure is for a domain user
<domain>\IUSR_.. mine is for the name of the forms user I have
created in the UserAccounts database. Under IIS I have reportBuilder
running with Anonymous Authentication as user IUSR_

It's starting to drive me mad too, this needs to be integrated into a
product for the end of the month.

Si

[quoted text, click to view]
tlarbo NO[at]SPAM gmail.com
7/25/2006 12:51:10 PM
To create a user/group that can log into Report Manager and do
everything, create the user/group, then do the following:

1. Log into Report Manager as the admin user (or whatever name you gave
to the admin user).
2. Click "Site Settings" in the top-right corner
3. Under Security, click "Configure Item-level role definitions"
4. Name the Role and assign it to all of the tasks (click OK when done)
5. Click on "Site Settings" again
6. Under Security, click "Configure system-level role definitions"
7. Click "New Role"
8. Name the Role and assign it to all of the tasks (click OK when done)
9. Click "Site Settings"
10. Click "Configure Site-wide security"
11. If your user/group is already listed, click "Edit" next to it,
otherwise click "New Role Assignment" then type in your user/group name
on the next screen
12. Select the checkbox next to the system role you created in steps
6-8 (click Apply when done)
13. Click "Home" in the top-right corner
14. Click on the blue "Properties" tab
15. If your user/group is listed, click "Edit" next to it, otherwise
click "New Role Assignment" and type in your user/group name on the
next screen
16. Select the checkbox next to the role you created in steps 3-4
(click Apply when done).
17. Click Home. The end.

There are two different types of roles: item-level roles and
system-level roles. My guess would be that something was missing from
your list of 'tasks' in the item-level roles assigned to the
group/user. If you follow these instructions, you should end up with a
user/group that can do everything. This should help you determine if
it's a matter of permissions settings or something wonky with your
server setup. FYI, I would recommend against giving your users full
control over everything as described here.

I hope this helps.

Tim Larson
Db Diva
10/3/2008 4:07:48 PM
I am wondering what to look for on the server-level setup to address this issue. We have created accounts through the Reporting Services interface that have every permission possible, and we are still seeing this error message when the staff members generate a report through the report builder. They are accessing the report via link because we've been unable to get the button to appear. We have the data source configured to use stored credentials, but the error message we are seeing references the logged in user as the account with insufficient permissions.

From http://www.developmentnow.com/g/115_2006_6_0_0_780761/IUSR-Machine-account-permissions-in-Report-Builder.htm

Posted via DevelopmentNow.com Groups
AddThis Social Bookmark Button