SQL Server – Reporting Services – HTTP Endpoints – Permissions

Background

Microsoft Reporting Services exposes a couple of URLs, let us identify them and offer a generic guide post on how grant permissions to users to access them.

 

Identification

Endpoints

Upon launching “Reporting Services Configuration Manager” and navigating to the  “Web Service URL” and “Report Manager URL” tabs, here is what it looks like.

URL

Web Service URL

urlpermissioning-webserviceurl-brushed-up

Report Manager URL

urlpermissioning-brushed

 

Roles

What functionalities does these URLs provide

  1. Web Service
    • Accessing the Soap API ( Link )
      The Report Server Web service uses Simple Object Access Protocol (SOAP) over HTTP and acts as a communications interface between client programs and the report server. The Web service provides two endpoints – one for report execution and one for report management – and consists of methods and a set of complex type objects that you can use to access the complete functionality of Reporting Services. To call the service, you must reference the Reporting Services Web Services Description Language (WSDL).
  2. Report Manager
    • Reporting Services Report Server > Report Server (Native Mode) > Configure and Administer a Report Server (SSRS Native Mode) ( Link )
      Report Manager is a Web front end application used to view reports, manage report server content, and grant user access to a native mode report server. Report Manager is installed with the Report Server Web service within the same report server instance and optionally configured

 

Permissioning

Web Service

Steps

Here are the steps:

  1. Launch Internet Explorer
  2. Enter the URL
    • Format :- http://<machine-name>/Reports/Pages/Folder.aspx?ItemPath=%2f&SelectedTabId=PropertiesTab
    • Sample :- http://DBDEV/Reports/Pages/Folder.aspx?ItemPath=%2f&SelectedTabId=PropertiesTab
  3. On the top bar menu, we have / My Subscriptions / Site Settings / Help
    • Please choose “Site Settings
  4. The “Site Settings” window appears
    • In the General Tab
      • No changes need to occur
      • But, for sake of cosmetics let us change the Name
        • From :- “SQL Server Reporting Services
        • To :- “SQL Server Reporting Services – Application – Assist
    • In the Security Tab
      • The default lone group is [BUILTIN\Administrators]
      • Please add new groups by clicking the “New Role Assignment” button
      • Active Directory Groups and users can be added to either or both pre-model groups.  The group names are System Administrator and System User

 

Site Settings

sitesettings-bar

 

Site Settings – General
Site Settings – General – Before

sitesettings-general-20161109-0519pm

 

Site Settings – General – After

sitesettings-general-20161109-0522pm

 

Site Settings – Security
Site Settings – Security – Before

sitesettings-security-20161109-0526pm

 

Site Settings – Security – In progress

newsystemroleassignment-20161109-0553pmbrushed-up

Site Settings – Security – After

sitesettings-security-post-20161109-0558pm-brushed-up

Report Manager

Steps

Steps

Here are the steps:

  1. Launch Internet Explorer
  2. Enter the URL
    • Format :- http://<machine-name>/Reports/Pages/Folder.aspx?ItemPath=%2f&SelectedTabId=PropertiesTab
    • Sample :- http://DBDEV/Reports/Pages/Folder.aspx?ItemPath=%2f&SelectedTabId=PropertiesTab
  3. Under the Home label, we have “New Folder” \ “New Data Source” \ “Report Builder” \ “Folder Settings ” \ “Upload File
    • Please choose “Folder Settings
  4. In the “Folder Settings” window
    • The lone group assigned is “BUILTIN\Administrators” and it is assigned the “Content Manager” role
    • Let us add other groups and users that should be able to add and view reports
    • First “View Reports
      • Click the “New Role Assignment
        • For the sake of generalization, we will cast a bit net and add the “NT AUTHORITY\Authenticated Users” group to the Browser group
    • Second “Add Reports”
      • Again, click the “New Role Assignment
        • And, we will shortlist and add a small group, the pre-created DBA group

Menu Bar

foldersettings

 

Folder Settings

foldersettings_assignments-20161109-0610pm

Folder Settings – New Role Assignment – Browser

foldersettings_assignments-browser-20161109-0612pm

 

Folder Settings – New Role Assignment – Content Manager

foldersettings_assignments-contentmanager-20161109-0637pm-after

 

Folder Settings – After

foldersettings-settings-20161109-0641pm-cropped

Summary

There are two HTTP endpoints that you want to grant permissions for.  And, those are Web Services and Report Manager.

 

References

Web Service

  1. Report Server Web Service \ Accessing the SOAP API \ Accessing the SOAP API
    Link

 

Web Service – Permission Configuration

  1. Tools > Report Manager  > Report Manager F1 Help > Site Settings Page (Report Manager)
    Link
  2. Reporting Services Features and Tasks > Security and Protection > Roles and Permissions > Grant User Access to a Report
    Link
  3. Reporting Services Features and Tasks > Security and Protection > Roles and Permissions > Granting Permissions on a Native Mode Report Server
    Link

 

Report Manager

  1. Reporting Services Report Server > Report Server (Native Mode)  > Configure and Administer a Report Server (SSRS Native Mode)
    Link

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s