Saturday 31 January 2015

Users cannot search for Reports on SSRS 2012 even with the System Administrator role

Today I encountered an issue where domain users could not search for reports on a recently comissioned SSRS instance. The users had the System Administrator roles in SSRS, but received the error “The permissions granted to domain\username are insufficient for performing this operation. (rsAccessDenied)” when attempting to search or access the Reporting Services home page (http://reportserver/reports). When the user was added to the server’s local Administrator group (BUILTIN\Administrators) the issue did not occur.

The Reporting Services log file had an error beginning with the following added:

“Microsoft.ReportingServices.UI.FolderPage+InsufficientPermissionsToRoot: User domain\username does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.   at Microsoft.ReportingServices.UI.FolderPage.Page_Init(Object sender, EventArgs e)”

Disabling UAC, as blog posts suggested, would require a restart to check, and the previous server had UAC set to its default and was working as expected.

The users had browser role on each of the folders on the home page.

The solution was to give the users the browser permission on the home page. Turns out, that home page is a folder, with its own security, and without the browser role on the Home folder, they can’t view the home page or search for reports.


1 comment: