Thursday, September 6, 2018

Need of Custom Role(s) in SSRS Security Model



1)   Predefined Role(s) in SSRS
Reporting Services installs with predefined roles that you can use to grant access to report server operations. Each predefined role describes a collection of related tasks. You can assign groups and user accounts to predefined roles to provide immediate access to report server operations.
We can assign user accounts/groups to predefined roles to provide immediate access to report server operations. Following is the pre-defined role(s) available in SSRS
Role
Type
Description
Browser Role
Item
If user or group would like to view folders, reports and subscribe to reports, you can add them to Browser role.
Content Manager
Item
If user or group need to manage contents in Report Server you can add them to Content Manager Role. They will be able to manager folders, reports and other resources.
My Reports
Item
If user or group is added to this role, they will be able to publish report, create linked reports, manager folders, reports and resources in user's My Report Folder.
Publisher
Item
If we want our user/group to have publish permissions, we can add user/group to this role and they will be able to publish report and linked report to report server.
Report Builder
Item
If we have users who often need to view the definition of reports by using Report Builder, we can add those users in this role.
System Administrator
System
Users who are assigned to this role can enable features and set defaults, set site-wide security, create role definitions in Management Studio, and manage jobs.
System User Role
System
Users who are assigned to this role can view basic information about the report server such as the schedule information in a shared schedule.

2)   Need of Custom Role(s) in SSRS
Based on the business requirement(s), we may need to create some unique roles with specific set of permissions e.g . Schedule Administrator who should be responsible for subscription, Report Caching, Report Snapshot & Report History only. In this case, we need to create a role with only those permission required for subscription, snapshot/caching.
3)   How to create  custom Role in SSRS
       Following are the steps to create a role in SSRS
            1.       Connect to SQL Server Reporting Service instance using Management studio
            2.       Go to Security FolderèRoles

          3.       Right Click on the Rolesè New Role

        4.       Type a unique name for the role & optionally type a description.

      5.       Select the tasks that members of this role can perform. Click Ok


                  ------------------------------------------End of Article-----------------------------------------


No comments:

Post a Comment