Friday, March 23, 2012

Permissions to data source in Report Manager

I'm deploying some reports to a customer box and am having some quirks
in getting the right permissions to the data source. Instead of going
into detail about my specific problem (which I don't think I can even
give a good description of since I can't see what groups the accounts
I'm using are members of because I don't have access to their AD), can
someone give a list of the permissions required on an account in order
to access a data source? SQL permissions? Report Server permissions? If
I were to create an account purely for accessing the data source for
the reports, is there a complete checklist that I could follow to
ensure all the proper permissions?
Thanks.Oh, btw, I'm concerned about permissions to standard sql database
tables/views, and possibly OLAP cubes.
Thanks!|||Anybody?|||Bueller?
Bueller?
Bueller?|||All right, well I figured it out, at least for SQL Server access. I
guess all a domain account needs is public and db_datareader access to
the db you're getting data out of. Any ideas if it's pretty much the
same if trying to get data from an OLAP cube?|||What you are doing here is using the users account for accessing the
database. I think this is a mistake. First, it makes management of the users
more difficult. Now, every time there is a user that needs to run a report
you have to mess with DB access. Also, by doing this your RS will not be
able to take advantage of connection pooling (connection pooling only works
if everything is exactly the same, which includes the user). What I do is
have a special user that is used only for RS data access and is given
readonly rights to the data. I use RS roles to determine who gets to run
which reports.
The other thing I do is add domain groups and users to a local group on the
server and use that local group with RS roles.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Wannabe_Kiwi" <amkessel@.gmail.com> wrote in message
news:1150908395.063069.70970@.c74g2000cwc.googlegroups.com...
> All right, well I figured it out, at least for SQL Server access. I
> guess all a domain account needs is public and db_datareader access to
> the db you're getting data out of. Any ideas if it's pretty much the
> same if trying to get data from an OLAP cube?
>|||I'm using a single, special domain account to access all the data
sources for all the reports, not using a bunch of individual user
accounts.
I'm still stuck on getting access to the SQL Analysis OLAP cubes, tho.
I can easily set permissions for SQL databases in Enterprise Manager,
but there doesn't seem to be an equivalent in Analysis Manager. Ideas?

No comments:

Post a Comment