User does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed. - by Nenea Nelu

Status : 

  By Design<br /><br />
		The product team believes this item works according to its intended design.<br /><br />
		A more detailed explanation for the resolution of this particular item may have been provided in the comments section.

Sign in
to vote
ID 622737 Comments
Status Closed Workarounds
Type Bug Repros 22
Opened 11/17/2010 1:52:36 PM
Access Restriction Public


We are trying to set SSRS 2008 report access as documented at the following link 
[] and getting the error below:

User 'DOMAIN\user' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.

We are using Microsoft SQL Server 2008 (SP2) - 10.0.4000.0 (X64)   Sep 16 2010 19:43:16   Copyright (c) 1988-2008 Microsoft Corporation  Enterprise Edition (64-bit) on Windows NT 6.0 <X64> (Build 6002: Service Pack 2) and SSRS 2008 SP2 as well.

IE8 - tried it with Protected Mode enabled/disabled no luck.
Windows User Account Control  is turned OFF on our SSRS reporting server box.
We tried pretty much all suggestions from the link below and nothing other than local admin group (which is unacceptable) can access Report Manager URL to view reports and their history as per "View Reports" description of the Browser SSRS default role.
Sign in to post a comment.
Posted by Tony TT on 3/24/2016 at 6:25 AM
The last poster's solution (Senthil Jayaraman) is good, but it's not obvious how to start IE as administrator on Server 2012. Browse to the folder 'c:\Program Files\Internet Explorer', right click and the 'Run as administrator' option will be available. As other posters have pointed out, this issue has wasted an enormous amount of time and effort.
Posted by Senthil Jayaraman on 2/6/2016 at 3:18 AM
Below is what I did to make it work:

1. Start IE as an administrator and load your SSRS site
2. Go to Folder Settings and add your user name and assign relevant Role(s)
3. Start IE or any other browser for that matter and the SSRS site comes up good
Posted by Chris Isbell on 1/19/2016 at 6:30 AM
Fortunately the comments here helped! I had SQL 2014 running on Windows 2012. My account was a local admin, and was already added explicitly (Domain\user) to be a system admin for SSRS under Site Settings. However, this was not enough, even though it always had been. I had to download Firefox, launch Firefox as admin, and then I could see the home folder and set security for domain\user logins. Silly, and a PITA.
Posted by RW_1234 on 10/1/2015 at 12:26 PM
This problem has plagued me for a long time. The solution is actually quite simple. The KB article 934164 for SSRS 2005 contains a tiny section for "adding New Role Assignments". It's so simple that everyone misses it, because SSRS 2008, 2008R2, 2012 and up do not use I.I.S. at all,, and therefore the KB article is not applicable.    But all you need to do is go onto the server where the SSRS site is running (http://localhost/reports), and then stay in the "Home" folder. Click on the "Folder Settings" button, and then add your regular, domain users account as a "New Role Assignment", with a minimum of "Browser" and "Content Manager" for each regular Windows user.

After doing that, almost any version of IE from a domain-joined desktop PC can be launched, WITHOUT "As Administrator", and run and access reports just fine.
Posted by Greg Horvath on 9/24/2015 at 9:56 PM
From what I can tell there is no way to work around this on Windows 10. There is no option to install IE and Edge cannot be run as and administrator because it is an app. This is extremely frustrating and a huge waste of time.
Posted by _davedave_ on 9/3/2015 at 11:51 AM
With Windows 10 + SQL 2014, the workarounds fix Internet Explorer, but not the new Microsoft Edge browser. It still responds: "User 'localmachinename\localadminuser' does not have required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed." I guess we need to stick with IE for accessing SSRS???
Posted by RCC, Inc on 8/21/2015 at 1:36 PM
This continues to occur on SQL 2014 SP1
Posted by Alex Whittles - Purple Frog on 7/23/2015 at 3:04 AM
I'll echo other's sentiments here - if this is 'by design', then the sanity of the design team needs to be questioned... This is crazy Microsoft. If a user is a local administrator, then they should automatically be set up with full SSRS permissions without having to jump through these hoops
Posted by Missi724 on 4/17/2015 at 12:33 PM
Microsoft - you closed this issue, stating it "works according to its intended design". Might I suggest that you consider "re-designing" this? Just because something works as designed doesn't mean the design is good. In fact, one might argue that it would have been better to consider this a bug, than to state that you "intended" it to be so poorly thought-out and designed. When do expect to have a re-design tested and in place?
Posted by Bryce White on 3/5/2015 at 7:37 AM
Seriously Microsoft? There is no excuse for this nonsense to have gone on without being fixed for so many YEARS! Listen up SSRS Team - get off your collective butts and do your job - FIX THIS!
Posted by Kashif Altaf on 1/13/2015 at 8:48 AM
See the following for solution:-
Posted by SqlBIGuyMN on 11/10/2014 at 6:35 PM
Extremely frustrating for developers when trying to develop locally.
Posted by Steve Hughes - Data On Wheels on 10/30/2014 at 10:50 AM
Still an issue. I just went through the workaround to get by this. For the record, it has to be IE. When trying to get to it via Chrome it did not work. Furthermore, I used IE on the desktop. I agree with what has been noted here over the years, if you are local admin and basically have all necessary permissions on the server/workstation, the extra steps seem problematic and reflect poorly on the tool.
Posted by Rob Kraft on 8/4/2014 at 10:40 AM
Wow! This major bug still exists with all the latest Microsoft products. This is terribly embarrassing for them. You have to run IE or Chrome as an admin to get to your report manager. Why does Configuration Manager even contain a link to the Report Manager URL since it will always fail, unless users are running on Windows XP? I'm prepping to teach a course on SSRS, and you can bet I'm going to slam MS on this because all of my clients will need to run IE as Admin to get to report manager. Horrible design.
Posted by Edward Forgacs on 11/15/2013 at 2:06 AM
Utterly ridiculous. Only Reporting Services could manage to be this poorly designed that it doesn't work with an integral feature of Windows.
Posted by Craig Bryden on 8/2/2012 at 5:03 PM
I fully agree with Simon Hetzel. This is ridiculous. If my user is a local administrator on the server, why should we have to run IE as administrator????
Posted by Simon Hetzel on 7/12/2012 at 1:52 PM
This STILL occurs in SQL 2012 with Windows 2008 R2 SP1. If this is "By Design" then it's really dumb - please change it.

I'm on the local server as a domain user with local admin rights trying to access Report Manager. I should NOT have turn off UAC, or run IE "as Administrator" or add explicit roles for the domain user account I'm using (they are already a member of the local admins group that has those role assignments).

All these things work but they are workarounds and they should not be necessary.
Posted by AddinGanteng on 5/29/2012 at 6:34 PM
Solution from SebMohIraj works for me.
Posted by George Keradinidis on 5/8/2012 at 5:14 AM
Solution from sunil raju works for me (SSRS 2008 R2)
Posted by fast42 on 3/28/2012 at 1:40 PM
i have tried all of these fixes to no avail. i can only open the site on the ssrs server as admin, myself or no other users can open it from other machines on the network. i am running 2k8 r2 enterprise x64 and same for sql / ssrs. PLEASE HELP!!
Posted by SebMohIraj on 3/23/2012 at 5:16 AM
Hi I have created a walk through with screen shots to help you resolve this problem with SSRS not viewing. Hope this is helpful:

Posted by DabekXp on 2/22/2012 at 5:12 PM
There is one undocumented solution:
You have to Run as administrator your browser. Then put url: http://localhost/Reports (absolutelly do not put http://<server name>/Reports - it doesn't work). Go to Folder Settings and assign role browser and content manager to your administrator. It should start working now.
If you are running it on Windows server 2008 don't forget to create inbound rule in windows firewall to port 80!!
Now it start working also from the other computers
Posted by NaiveLearner on 2/15/2012 at 7:59 AM
Sunil Raju - You Rock.

Microsoft - You suck.

Right click - Run as Administrator did the trick.
Posted by DougL65 on 4/22/2011 at 9:39 AM
I just uninstalled and reinstalled SQL Server 2008 R2 with SSRS. After reinstalling, I get this message even though I am - and always have been - in the Administrators group. Adding a role assignment for my domain account, as described below, fixes this, but it shouldn't be necessary.

Prior to uninstalling and reinstallation, this worked as expected (without needing the additional role assignment). Between uninstallation and reinstallation, there were no changes to my domain- or machine rights.
Posted by Microsoft on 4/13/2011 at 8:40 AM
For users to navigate to a particular folder, they must have Browser role on all folders starting at the root folder (the folder named "/" in the item path or "Home" in Report Manager). So you will need to grant those permissions explicitly. By default, permissions are inherited from the parent folder. If there are any breaks in the inheritance, you will need to set those permission exiplicitly.

I have closed this item because I do not see a bug here. If this is still a problem, simply respond in Connect and the issue will be automatically re-opened.

Hope this helps,
Posted by sunil raju on 3/31/2011 at 4:20 AM
To get this resolved you need to start you Internet Explorer as Administrator -> Run as Administrator then open the url http://<Server name>/Reports this will take you to the "SQL Server Reporting Services" Home page
Click on the "Folder Settings" button.
Click on the "New Role Assignment" button.
Add the Group or user name: DOMAIN\USER_NAME, and permissions you have logged in as.
Click on Ok button.
This should relolve the issue.
Posted by DennisJWatts on 2/1/2011 at 8:59 AM
To get this resolved you need to SSRS set up and the admin can get into the following location:
http://<Server name>/Reports/Pages/Folder.aspx

Just go to the http location specified above as the admin. (you have to be the admin)
Click on the "Folder Settings" button.
Click on the "New Role Assignment" button.
Add the DOMAIN\USER_NAME, and permissions you want that user to have.
Click the 'Apply' button. Have the user test it out.

If you are still having issues, I'd recommend going into the Reporting Services Configuration manager.
In the 'Connect' section, click on 'execution account'
add the DOMAIN\USER_NAME to the Account textbox, leave the PWs blank, and click the 'Apply' button. Then try it out.
Posted by Nenea Nelu on 11/30/2010 at 6:58 AM
OK so the process described below by "Herbert Leonard" refers to SQL2005 and SSRS2005 however I am running all on 2008 platform for SQL,SSRS and OS.
Managed to find the folder and checked that "browse" is enabled for the group users I want to give restricted access to and the physical folder has "read/execute", "read" and "list floder contents" rights for the group and still getting the same error.

Can anyone help?
Posted by Nenea Nelu on 11/25/2010 at 9:11 AM
Sorry to use this llike a forum and post questions however as we got no response yet from Microsoft if anyone could shed some light on the following step that would be really appreciated:

2° Go to the "root folder" in SSRS Management
     - What is "SSRS Management" and where is the "root folder"?
Posted by Herbert Leonard on 11/22/2010 at 12:36 PM
UPDATE : I finally fix this issue doing the following (From step 2):

1° Register User or Users Group as SSRS User in Site Settings > Security
2° Go to the "root folder" in SSRS Management
3° Click on "Manage Folder"
4° Add relevant User or Users Group, assign the "Browse" permission

All users of my dedicated Users Group have now access to SSRS Manager site.
Posted by Herbert Leonard on 11/22/2010 at 7:59 AM
The same issue occurs by my side with Microsoft SQL Server 2008 Standard Edition SP1 - SSRS Manager

Unique SSRS user group is :
- registered in Reporting Services database (DB owner)
- registered as Domain users in AD (consequently "Authenticated Users")
- assigned as SSRS User in SSRS Manager

None of this registration is sufficient.

Thank you for your feedback.
Posted by Nenea Nelu on 11/19/2010 at 7:51 AM
Similar error is happening trying to access Report Server:

Reporting Services Error

The permissions granted to user 'DOMAIN\user' are insufficient for performing this operation. (rsAccessDenied) Get Online Help

SQL Server Reporting Services