SSRS/Visual Studio Login Confusion

Hi folks,

I've nearly got my head wrapped around SSRS integration, but have reached a brick wall when it comes to authenticating Visual Studio to SSRS for the purposes of report deployment. I was looking for a T-Cast about initial setup that appears to have been taken down, but the replacement Custom Report Setup document doesn't seem to cover setup of SSRS in general (which was purportedly present in this T-Cast). Also, I'm one degree removed from the person who actually installed all of our server infrastructure, so I am not completely sure if the configuration and user permissions were done in the right way. Things seem to work, at least, but the custom report integration piece is causing some confusion.

My understanding is that Visual Studio can be used to edit a solution that has two different build configurations, pointing to the TEST and LIVE SSRS servers. The Data Sources deployed on each server will point to the appropriate database using the common name "TessituraDB", but since the datasource in the solution can only maintain a single configuration, after doing the proper data source deployments to each server, the "Overwrite Data Sources: False" setting will prevent the single persistent configuration from ever overwriting the incorrect one. However, after defining different destination SSRS servers for the two build configurations, I am unable to find where the logins for each of these servers should be configured. When I first attempted to deploy to my TEST server, a credential window popped up, but now when I am attempting to deploy to my LIVE server, the deploy fails outright with:

The permissions granted to user 'TESSIDB01\nreiling' are insufficient for performing this operation.

Right now, I CAN deploy an SSRS report to LIVE by launching Visual Studio as administrator on the database server. However, I would like to be able to develop my reports on my local workstation, and I am presuming that I shouldn't need to launch VS as Administrator in the first place if everything is configured correctly. Strangely enough, the error message above appears when deploying from my local workstation, even though that username was never input and doesn't even match my user login on the machine itself. I do have stored credentials for that server, however, that I suppose could be getting picked up when VS tries to authenticate for SSRS deployment.

One component that I really don't understand much about, nor have I seen configuration for anywhere is where user permissions and roles are configured with regard to SSRS. There is a specific login that is used for SSRS administration (I can log into /Reports_ in a web browser), but I am COMPLETELY baffled as to how this is managed. I know it is configured in TIM as "SSRS: Windows Domain User", but the same appears nowhere in SSRS Configuration Manager, the Windows user is a member of no group but Users, and it doesn't even exist as a DB login on TEST (it does on LIVE, though, strangely enough). I can find no other place to manage security and logons for SSRS -- using the Windows Domain User to log in to the web interface still reaches a "You do not have permission to access this page" error when attempting to access security on a folder (presuming this is even remotely relevant), there are no buttons for Site Settings or Properties on those pages, and evidently elevating my personal domain logon to server administrator when running VS on our live database server was enough to enable access to deploy an SSRS report to that server.

So, I can think of a few possible explanations here:

  1. I should be trying to find this dialog box which displayed when I was deploying to the TEST SSRS instance the first time.
  2. The permissions and/or stored credentials set on/for the SSRS instances differ, and LIVE is allowing a connection from my stored domain user credential that doesn't have sufficient permissions, whereas TEST was denying my domain credential outright prompting me to log in using the proper SSRS user.

I would love for someone to drop even a tiny bit of knowledge to confirm or clarify any of what I've written above. I feel like if only I could get back to that SSRS Login dialog box for the LIVE server I'd be all set, but the documentation only tells you what it does, not where to find it.

Some notes about our environment:

  • We have no AD server so passwords are manually synced across different servers when necessary -- I have a high level of confidence that this doesn't cause an issue, but could be seen as odd.
  • We are running SQL Server and SSRS 2012 on Windows Server 2008 R2. Perhaps my inability to see the Properties/Site Settings buttons in the SSRS Administration page is due to a difference in SSRS 2012, or maybe that's a permissions issue in itself?
  • BIDS has been superseded by "SQL Server Data Tools" as of SQL Server 2012, so this is what is installed in VS 2010 on the database servers, and in VS 2012 on my local machine. There appears to be no functional differences for the SSRS features we use--just a graphical overhaul.

  • I know that in order to deploy to the Report Manager... As the Administrator, you need to configure Report Manager so your desired user has access.  

    Start your browser
    Type in your Report Manager URL (http://<<reportservername>>/reports).

    The Report Manager now renders the Home folder

    Click on the Folder Settings tab.

    Click on the New Role Assignment button

    Assign your account to the Content Manager role.

    Click on the Ok button to save the new user-role

     

    Click on the Site Settings link located at the top-right of the browser's window

    Click on its Security option located on the left pane

    Add yourself to the System Administrator and System User roles.

    Click on the Ok button to save the changes

     

    Hope this was helpful.



    [edited by: Renville Williams at 3:43 PM (GMT -6) on 21 Mar 2014]
  • Nick,

    One thing to check with regards to publishing rights for SSRS is that your windows account is a member of the Content Manager's group.  The account that runs the SSRS service on the SQL box is by default the "administrator" and unless you add other users, that's the only account that will be able to actually get to the reports or reportserver sites for SSRS.

    So I would login as the administrator on the sql box and add your windows account under folder settings at the root level.

  • Aha, thanks — I’m starting to realize some more things about the situation. I believe the only account that has administration for SSRS currently was probably the server administrator — so, I need to connect with my network infrastructure tech who did the installation and get management privileges on SSRS for myself. Until I do that, I have no access to the Properties or Site Settings tabs in SSRS.

    Still unclear about credential management for SSRS login from Visual Studio, though, and Google still hasn’t been any help on that front.

    On Mar 21, 2014, at 4:33 PM, Renville Williams <bounce-renvillewilliams6971@tessituranetwork.com> wrote:

    I know that in order to deploy to the Report Manager, you need to configure Report Manager so your desired user has access. 

    Start your browser
    Type in your Report Manager URL (http://<<reportservername>>/reports).

    The Report Manager now renders the Home folder with the Contents and Properties tabs

    Click on the Properties tab.

    Click on the New Role Assignment button

    Assign your account domain/user_name to the Content Manager role.

    Click on the Ok button to save the new user-role

     

    Click on the Site Settings link located at the top-right of the browser's window

    Click on its Security option located on the left pane

    Add yourself to the System Administrator and System User roles.

    Click on the Ok button to save the changes

     

    Hope this was helpful.

    From: Nick Reilingh <bounce-nicholasreilingh4883@tessituranetwork.com>
    Sent: 3/20/2014 9:18:49 PM

    Hi folks,

    I've nearly got my head wrapped around SSRS integration, but have reached a brick wall when it comes to authenticating Visual Studio to SSRS for the purposes of report deployment. I was looking for a T-Cast about initial setup that appears to have been taken down, but the replacement Custom Report Setup document doesn't seem to cover setup of SSRS in general (which was purportedly present in this T-Cast). Also, I'm one degree removed from the person who actually installed all of our server infrastructure, so I am not completely sure if the configuration and user permissions were done in the right way. Things seem to work, at least, but the custom report integration piece is causing some confusion.

    My understanding is that Visual Studio can be used to edit a solution that has two different build configurations, pointing to the TEST and LIVE SSRS servers. The Data Sources deployed on each server will point to the appropriate database using the common name "TessituraDB", but since the datasource in the solution can only maintain a single configuration, after doing the proper data source deployments to each server, the "Overwrite Data Sources: False" setting will prevent the single persistent configuration from ever overwriting the incorrect one. However, after defining different destination SSRS servers for the two build configurations, I am unable to find where the logins for each of these servers should be configured. When I first attempted to deploy to my TEST server, a credential window popped up, but now when I am attempting to deploy to my LIVE server, the deploy fails outright with:

    The permissions granted to user 'TESSIDB01\nreiling' are insufficient for performing this operation.

    Right now, I CAN deploy an SSRS report to LIVE by launching Visual Studio as administrator on the database server. However, I would like to be able to develop my reports on my local workstation, and I am presuming that I shouldn't need to launch VS as Administrator in the first place if everything is configured correctly. Strangely enough, the error message above appears when deploying from my local workstation, even though that username was never input and doesn't even match my user login on the machine itself. I do have stored credentials for that server, however, that I suppose could be getting picked up when VS tries to authenticate for SSRS deployment.

    One component that I really don't understand much about, nor have I seen configuration for anywhere is where user permissions and roles are configured with regard to SSRS. There is a specific login that is used for SSRS administration (I can log into /Reports_ in a web browser), but I am COMPLETELY baffled as to how this is managed. I know it is configured in TIM as "SSRS: Windows Domain User", but the same appears nowhere in SSRS Configuration Manager, the Windows user is a member of no group but Users, and it doesn't even exist as a DB login on TEST (it does on LIVE, though, strangely enough). I can find no other place to manage security and logons for SSRS -- using the Windows Domain User to log in to the web interface still reaches a "You do not have permission to access this page" error when attempting to access security on a folder (presuming this is even remotely relevant), there are no buttons for Site Settings or Properties on those pages, and evidently elevating my personal domain logon to server administrator when running VS on our live database server was enough to enable access to deploy an SSRS report to that server.

    So, I can think of a few possible explanations here:


    1. I should be trying to find this dialog box which displayed when I was deploying to the TEST SSRS instance the first time.
    2. The permissions and/or stored credentials set on/for the SSRS instances differ, and LIVE is allowing a connection from my stored domain user credential that doesn't have sufficient permissions, whereas TEST was denying my domain credential outright prompting me to log in using the proper SSRS user.

    I would love for someone to drop even a tiny bit of knowledge to confirm or clarify any of what I've written above. I feel like if only I could get back to that SSRS Login dialog box for the LIVE server I'd be all set, but the documentation only tells you what it does, not where to find it.

    Some notes about our environment:


    • We have no AD server so passwords are manually synced across different servers when necessary -- I have a high level of confidence that this doesn't cause an issue, but could be seen as odd.
    • We are running SQL Server and SSRS 2012 on Windows Server 2008 R2. Perhaps my inability to see the Properties/Site Settings buttons in the SSRS Administration page is due to a difference in SSRS 2012, or maybe that's a permissions issue in itself?
    • BIDS has been superseded by "SQL Server Data Tools" as of SQL Server 2012, so this is what is installed in VS 2010 on the database servers, and in VS 2012 on my local machine. There appears to be no functional differences for the SSRS features we use--just a graphical overhaul.




    This message was sent automatically to you by www.tessituranetwork.com because you subscribed to the Tessitura Technical Forum. You may reply to this message to post to the Technical forum or visit the site to search, read and post to the forums. In the interest of keeping the forum posts from becoming cluttered, we encourage you to delete previous message text from your reply before sending. Thank you!

  • I am not totally sure, but I think Visual Studio/BIDS uses the credential that is tied to your browser. So if you've logged into the Report Manager from your Browser as your local user, that's the user that will be used in BIDS. I am not totally sure about this though.