Search

User does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed. by Nenea Nelu

Closed
as By Design Help for as By Design

12
0
Sign in
 to vote
Type: Bug
ID: 622737
Opened: 11/17/2010 1:52:36 PM
Access Restriction: Public
3
Workaround(s)
7
User(s) can reproduce this bug
We are trying to set SSRS 2008 report access as documented at the following link
[http://msdn.microsoft.com/en-us/library/aa337494.aspx] and getting the error below:

User 'DOMAIN\user' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.

We are using Microsoft SQL Server 2008 (SP2) - 10.0.4000.0 (X64) Sep 16 2010 19:43:16 Copyright (c) 1988-2008 Microsoft Corporation Enterprise Edition (64-bit) on Windows NT 6.0 <X64> (Build 6002: Service Pack 2) and SSRS 2008 SP2 as well.

IE8 - tried it with Protected Mode enabled/disabled no luck.
Windows User Account Control is turned OFF on our SSRS reporting server box.
We tried pretty much all suggestions from the link below and nothing other than local admin group (which is unacceptable) can access Report Manager URL to view reports and their history as per "View Reports" description of the Browser SSRS default role.

http://social.msdn.microsoft.com/Forums/en/sqlreportingservices/thread/4f3651cb-c608-4460-a45a-9337df2ab88a
Details (expand)
Product Language
English

Version

SQL Server 2008 - Enterprise Edition

Category

Reporting Services

Operating System

Windows Server 2008 R2
Operating System Language
US English
Steps to Reproduce
Created a Domain\user and added it to the local Users and Finance groups


To create role assignments on the report
1.In Home, open the Reports folder.
2.Select Revenue report and click the Properties tab.
3.Click Security.
4.Click New Role Assignment.
5.In Group or user name, specify a domain user account that needs permission to view the report - we selected Finance local user group.
6.Select Browser.
7.Click OK.

Actual Results
User 'DOMAIN\user' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.

Expected Results
The DOMAIN\user should have permission to open folders and view a single report as per Browser SSRS role. No other items should be visible to the user.

Platform

X64
File Attachments
0 attachments
Sign in to post a comment.
Posted by Craig Bryden on 8/2/2012 at 5:03 PM
I fully agree with Simon Hetzel. This is ridiculous. If my user is a local administrator on the server, why should we have to run IE as administrator????
Posted by Simon Hetzel on 7/12/2012 at 1:52 PM
This STILL occurs in SQL 2012 with Windows 2008 R2 SP1. If this is "By Design" then it's really dumb - please change it.

I'm on the local server as a domain user with local admin rights trying to access Report Manager. I should NOT have turn off UAC, or run IE "as Administrator" or add explicit roles for the domain user account I'm using (they are already a member of the local admins group that has those role assignments).

All these things work but they are workarounds and they should not be necessary.
Posted by AddinGanteng on 5/29/2012 at 6:34 PM
Solution from SebMohIraj works for me.
Thanks!
Posted by George Keradinidis on 5/8/2012 at 5:14 AM
Solution from sunil raju works for me (SSRS 2008 R2)
Posted by fast42 on 3/28/2012 at 1:40 PM
i have tried all of these fixes to no avail. i can only open the site on the ssrs server as admin, myself or no other users can open it from other machines on the network. i am running 2k8 r2 enterprise x64 and same for sql / ssrs. PLEASE HELP!!
Posted by SebMohIraj on 3/23/2012 at 5:16 AM
Hi I have created a walk through with screen shots to help you resolve this problem with SSRS not viewing. Hope this is helpful:
http://www.soheib.com/technical-knowledge/sql-server-2012-reporting-services-uac-user-access-control/

Thanks
Soheib
Posted by DabekXp on 2/22/2012 at 5:12 PM
There is one undocumented solution:
You have to Run as administrator your browser. Then put url: http://localhost/Reports (absolutelly do not put http://<server name>/Reports - it doesn't work). Go to Folder Settings and assign role browser and content manager to your administrator. It should start working now.
If you are running it on Windows server 2008 don't forget to create inbound rule in windows firewall to port 80!!
Now it start working also from the other computers
Posted by NaiveLearner on 2/15/2012 at 7:59 AM
Sunil Raju - You Rock.

Microsoft - You suck.

Right click - Run as Administrator did the trick.
Posted by DougL65 on 4/22/2011 at 9:39 AM
I just uninstalled and reinstalled SQL Server 2008 R2 with SSRS. After reinstalling, I get this message even though I am - and always have been - in the Administrators group. Adding a role assignment for my domain account, as described below, fixes this, but it shouldn't be necessary.

Prior to uninstalling and reinstallation, this worked as expected (without needing the additional role assignment). Between uninstallation and reinstallation, there were no changes to my domain- or machine rights.
Posted by Microsoft on 4/13/2011 at 8:40 AM
For users to navigate to a particular folder, they must have Browser role on all folders starting at the root folder (the folder named "/" in the item path or "Home" in Report Manager). So you will need to grant those permissions explicitly. By default, permissions are inherited from the parent folder. If there are any breaks in the inheritance, you will need to set those permission exiplicitly.

I have closed this item because I do not see a bug here. If this is still a problem, simply respond in Connect and the issue will be automatically re-opened.

Hope this helps,
-Lukasz
Posted by sunil raju on 3/31/2011 at 4:20 AM
To get this resolved you need to start you Internet Explorer as Administrator -> Run as Administrator then open the url http://<Server name>/Reports this will take you to the "SQL Server Reporting Services" Home page
Click on the "Folder Settings" button.
Click on the "New Role Assignment" button.
Add the Group or user name: DOMAIN\USER_NAME, and permissions you have logged in as.
Click on Ok button.
This should relolve the issue.
Posted by DennisJWatts on 2/1/2011 at 8:59 AM
To get this resolved you need to SSRS set up and the admin can get into the following location:
http://<Server name>/Reports/Pages/Folder.aspx

Just go to the http location specified above as the admin. (you have to be the admin)
Click on the "Folder Settings" button.
Click on the "New Role Assignment" button.
Add the DOMAIN\USER_NAME, and permissions you want that user to have.
Click the 'Apply' button. Have the user test it out.

If you are still having issues, I'd recommend going into the Reporting Services Configuration manager.
In the 'Connect' section, click on 'execution account'
add the DOMAIN\USER_NAME to the Account textbox, leave the PWs blank, and click the 'Apply' button. Then try it out.
Posted by Nenea Nelu on 11/30/2010 at 6:58 AM
OK so the process described below by "Herbert Leonard" refers to SQL2005 and SSRS2005 however I am running all on 2008 platform for SQL,SSRS and OS.
Managed to find the folder and checked that "browse" is enabled for the group users I want to give restricted access to and the physical folder has "read/execute", "read" and "list floder contents" rights for the group and still getting the same error.

Can anyone help?
Posted by Nenea Nelu on 11/25/2010 at 9:11 AM
Sorry to use this llike a forum and post questions however as we got no response yet from Microsoft if anyone could shed some light on the following step that would be really appreciated:

2° Go to the "root folder" in SSRS Management
     - What is "SSRS Management" and where is the "root folder"?
Posted by Herbert Leonard on 11/22/2010 at 12:36 PM
UPDATE : I finally fix this issue doing the following (From step 2):

1° Register User or Users Group as SSRS User in Site Settings > Security
2° Go to the "root folder" in SSRS Management
3° Click on "Manage Folder"
4° Add relevant User or Users Group, assign the "Browse" permission

All users of my dedicated Users Group have now access to SSRS Manager site.
Posted by Herbert Leonard on 11/22/2010 at 7:59 AM
The same issue occurs by my side with Microsoft SQL Server 2008 Standard Edition SP1 - SSRS Manager

Unique SSRS user group is :
- registered in Reporting Services database (DB owner)
- registered as Domain users in AD (consequently "Authenticated Users")
- assigned as SSRS User in SSRS Manager

None of this registration is sufficient.

Thank you for your feedback.
Posted by Nenea Nelu on 11/19/2010 at 7:51 AM
Similar error is happening trying to access Report Server:

Reporting Services Error
--------------------------------------------------------------------------------

The permissions granted to user 'DOMAIN\user' are insufficient for performing this operation. (rsAccessDenied) Get Online Help

--------------------------------------------------------------------------------
SQL Server Reporting Services
Sign in to post a workaround.
Posted by baibam on 3/14/2013 at 6:42 AM
I had the same Problem on SQLServer 2012 but only with IE. It worked without Problems on Firefox 19.0.2. I could assign the neccessary rights from here, as described by DabekXp and the it worked also on IE.
Posted by DabekXp on 2/22/2012 at 5:13 PM
There is one undocumented solution:
You have to Run as administrator your browser. Then put url: http://localhost/Reports (absolutelly do not put http://<server name>/Reports - it doesn't work). Go to Folder Settings and assign role browser and content manager to your administrator. It should start working now.
If you are running it on Windows server 2008 don't forget to create inbound rule in windows firewall to port 80!!
Now it start working also from the other computers
Posted by Nenea Nelu on 1/19/2011 at 11:20 AM
We found a workaround by adding our custom "Viewer" Role to SSRS through a very non intuitive and not well enough documented process. We used this new SSRS "Viewer" role instead of the default "Browser" to do all the new Role Assignments for our local NT groups.

Besides the tedious work to add security for each of our hundreds of reports organized in folders I wonder how we would add new custom "Role" in future versions if SSMS "Reporting Services" UI will be discontinued as per many on line articles. To my knowledge a new SSRS “Role” can not be added through the Report Manager web site but just the "Role Assignments".
© 2013 Microsoft Corporation. All rights reserved. Microsoft Connect Terms of Use | Trademarks | Privacy Statement