Geeks With Blogs
Bill Jones Jr. MVP Visual Basic Charlotte NC - MCP C# and VB.Net - Founder and President of the Enterprise Developers Guild (.Net User Group)

rsAccessDenied was all that stood between me and high fives from the customer.  The message from SQL Server Reporting Service (SRS) even displayed the clients log on name – so SRS KNEW who it was denying.  No impersonation was going to solve this one. 

 

The Redirect string was fine, because it worked in test and on the server for those of us with admin rights.  (Yeah, I know -- but this a practical blog -- remember?)  So I fired up Report Manager to see what it had to say about the security settings on my report folders.  All I saw was the built in administrator and no way to add any more.

 

Hmmm.  At the Home folder level, I could add roles.  Since my client had access to the box, she must be in some local group or another, so I added Guests and Users with SRS Browser capacity.  I sauntered over to the client and acted as if I expected the report to work now.  It did.  I took my bows and made my exit with no small relief.

 

If this stuff was easy, nobody would need developers.

 

  Bill J

  Charlotte NC

 

 

Posted on Sunday, May 1, 2005 4:51 PM 2. Code Practice | Back to top


Comments on this post: SQL Server Reporting Services and rsAccessDenied

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Bill,
Your post on Authentication was a big help in resolving the same problem at my client site. Thanks a bunch.
Sanjay
Left by Sanjay on Oct 28, 2005 2:31 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Glad I could help.
Left by Bill J on Oct 28, 2005 4:06 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
I salute the King.
Left by F Miles on Jan 21, 2006 6:21 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Thank You, really helped

Enjoyable Narrative
Left by Ernest B on Feb 10, 2006 8:55 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
You are most welcome Ernest B.

Bill J
Left by Bill J on Feb 10, 2006 10:48 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Doesn't work in my case (Windows 2003 Server, SQL 2000 SP3a, RS 2000 SP2) still rsAccessDenied.
Left by DevMain on Mar 21, 2006 11:32 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Thanks. It solved my problem too. It would solved it more quickly if I read it more thoroughly. I get so used to skimming
Left by Keith L on Apr 19, 2006 6:17 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
hey that gave me high fives from the customer
but iwas for u
Left by rakesh agarwal on May 08, 2006 11:30 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
YES!...THANK YOU, BILL!!!

Bill Rocks...if you deny it, you're a terrorist..

Thanks again!

Russ
Left by Russ Wilson on May 16, 2006 1:06 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Thanks from Russia
Left by alexansp on Jun 15, 2006 3:23 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
You really help me, thanks from Rome (Italy)
Left by Ezio Menotti on Jan 13, 2007 9:42 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Thank You, really helped
Left by venkat on Jul 04, 2007 1:11 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Thanks for the post, it works well, however how to assign the roles if I need anonymous access (without enabling it on IIS and SQL RS)??? from the report manager that is.
Left by Ray on Jul 19, 2007 3:02 AM

# How to resolve this ?
Requesting Gravatar...
dear Bill,

I tried follow the steps you had mentioed but it doesnt seem to be working. I might be going wrong somewhere. Could you please let me know the exact steps (also from where to do those like, through Reporting Services Manger ) to follow ?

This would be of great help

Best Wishes
Nitin S
Left by Nitin S on Aug 16, 2007 8:03 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
The permissions granted to user 'SHAWAHNEH\ASPNET' are insufficient for performing this operation. (rsAccessDenied)

So PLZ I want to solve this Problem.
Left by Ahmad Shawahneh on Sep 14, 2007 6:54 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Awesome tip Bill. Worked like a charm for me!

Not only that but check out how wicked this combination is.

Try the same thing that you tried above, but do it with and without "Anonymous Access" setup for the ReportServer virtual directory.

If "Anonymous Access" = OFF then you get the ability to edit those roles that you listed (Guests and Users with SRS Browser capacity)

If "Anonymous Access" = ON then you don't get anything. Kaput. Nothing but a blank properties screen.

Talk about 'needle in a haystack'. Crazy.
Left by Robert Naum on Sep 22, 2007 4:47 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
I had a hard time getting it to work, was getting a blank page when I launched the Report manager (htto;//localhost/reports), but here's what got me going:

Launched IIS, under Default Website go to Reports node and opened up security settings. Disabled all authentications (especially Anonymous and Windows) and enabled only Basic and ASP>NET impersonation. Next time I opened Report Manager it asked for my credentials and there it was... the report manager in all its glory..

just did high fives in air as I was the only one working in the office on this Friday afternoon.

eJazz
Left by eJazz on Oct 19, 2007 5:48 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Was getting rsAccessDenied for the _IUSR account. Turns out if Anonymous Access is turned on, IIS grabs that first and never authenticates. So even if you are logged on as an Administrator you can't access the Home folder in SQL Manager for Reporting Services. Removing Anonymous Access with the IIS virtual directory (thanks Robert Naum above) allows you to access...
Left by Jay on Dec 01, 2007 5:25 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
"If this stuff was easy, nobody would need developers"

There's a reason I'm losing my hair and sanity!

LOL!! Big up !


:D
Left by Dave on Jan 24, 2008 8:20 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Okay... that was simple! (Sigh)

Thanks, you've saved me a lot hassle! :-)
Left by JB on Apr 01, 2008 12:26 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
It sounds from the dialog here that everyone is running Sql Server 2005 and IIS 6. I'm running Sql Server 2008 CTP and IIS 7 (Vista Ultimate). I don't see where I have the setting available for "Anonymous User." I get just a header on the /reports. I've tried, everything I can think of.

Also, in the Sql Server Management Studio my folders look different - no HOME area, just JOBS.

Man, I hope you can help me...
Left by William Ross on May 30, 2008 12:53 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Um, I found the Anonymous User setting, but that didn't help.

When I first installed Sql Server, apparently my Default Website was not running, so I thought it might be a bad install. At any rate, I gave Everyone all rights to the physical folders, but I still got the error. So I just installed a new instance - but still I get the access denied. Maybe I don't quite get the solution you are describing?
Left by William Ross on Jun 03, 2008 6:22 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
>>>...Hmmm. At the Home folder level, I could add roles....

At the Home folder level I can do NOTHING. What do I do in this case?
Left by William Ross on Jun 03, 2008 8:05 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
I have the same problem of this access denied...
I am runing Vista buzisness and SQL server 2005.
In order to make it work i need to run my exporer with administrative rights , then i can get my reports but could not find the way of running it as a normal users in order to simply browse to my report page...
I have check many thing as well as the step by step procedure to setup SQL 2005 under vista but othing works...

any idea?
Left by serge on Jul 22, 2008 7:06 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Hi William,

I am using SQL 2008 RTM on Vista x64. I have experienced the same issue with yours. I had solved my issue.
Initially I use a user account with local admin rights to start SSRS services. It started well, but when I go to Report Manager URL. I got rsAccessDenied error. This is similar issue with what I used to have in SSRS 2005 when I changed services account to a normal user rather than "Network Service".
So to solve the issue, what I did is:
- change the services account back to "NetworkService" built-in account via SSRS Configuration Manager
- restart my computer.
- voila, it works!!

HTH,
Uzzi
Left by Uzzi on Aug 24, 2008 7:05 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Thanks Bill, from sunny Los Angeles!
Left by Kimi Rose on Aug 27, 2008 12:38 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Tnx, Bill. Great advise.
Left by Jonathan on Sep 18, 2008 2:22 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Thanks so much form venezuela! this solution made my day
Left by Jessica Izaguirre on Oct 06, 2008 2:16 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Bill, you are the greatest. I have tried so hard, just aboth to give up; then i saw your article. Oh man, i feel good, really good. Keep doing what you are doing.

THANKS out loud!
Left by Sean on Oct 17, 2008 3:26 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Really helped, thanks from Lithuania
Left by Darius L. on Oct 27, 2008 5:04 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Well all of that didn't work for me. I am running SQL 2008 on Windows Server 2008.

It worked after I set the site to TRUSTED for the reporting services site.
Left by michael wharton on Nov 04, 2008 12:25 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
You are a star... thanks
Left by Kuberan Govender on Nov 05, 2008 11:02 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...

hi there,

I hope that my short explaination about setting up SSRS 2008 will help you guys out there. The usual error that faces the SSRS 2008 installer is that you sometimes can get this error: "The permissions granted to user 'username' are insufficient for performing this operation. (rsAccessDenied)"

this is what my current host (www.asphostcentral.com) did to install the Reporting Service 2008 for me.

1. They asked me to provide a Report Server and Report Manager URL, e.g. www.myDomain.com/RS for Report Server and www.myDomain.com/RM for report Manager
2. They begin to install the SSRS 2008 by specifying the above URL on the Web Service URL and Report Maanger URL
3. They did create the Report Server Manager database for me
4. Under the Service Account, they use my FTP details as the login details
5. Once this is done, they created a user called "my_FTP_Username" on the Report Manager interface and assign the role: BROWSER and PUBLISHER for me.

They then came back to me and informed that everything is up and running. I tested it out and yes, it was working perfectly. The MOST common issues that I can see is that usually you guys fails to assign the correct role to the FTP User. If you have an FTP User called: "abc" then, the BROWSER and PUBLISHER roles must be assigned to "abc" user.

With just $4.99/month, I strongly believe that asphostcentral.com is worth a try. They did charge some fees for SSRS 2008, but it certainly recommended as there is no headache whatsover :)

I am a happy camper with them :)

P.S: I have not tried SSRS 2005. I jumped straight to use SSRS 2008 because I want new technology on my portal and I strongly believe that the setup of SSRS 2005 will be less about the same with the SSRS 2008.

P.S2: If you are setting the SSRS on your LOCAL PC, that would be even easier. Why? Just assign your SSRS user an Administrator rights and everything will be working fine. If you do not know how to add your user as an Administrator, please go to your "Computer Management" and add the user under the "Administrator" groups. Fixed all :)
Left by Trevor_Bonny on Dec 02, 2008 6:26 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
hi Trevor_Bonny,

I am new to SQL server and its configuration .
I am facing a same problem while doing a project
can u guys please help me out by explaining how to add roles
and adding Users with SRS Browser capacity
Left by nkale04 on Jan 06, 2009 8:28 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
To all those who still face the issues in SS2008 with Vista please follow the below link.
http://www.sqljunkies.com/Article/525B575A-7F61-483A-AC8F-FEC700C34674.scuk
You need to have a virtual directory for Report Server and Reports pointing to your respective directories. (The default locations are "C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer" and "C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportManager" respectively)
Once you do that you will have the Contents and Properties available in the Home page.

To create User Roles Go to Properties tab, click on New Role Assignment. Create the user and assign the roles.
For existing User Roles, you may click on the Edit Roles and and assign the roles.
Left by Sharmin Jose on Feb 06, 2009 5:19 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...

Error
deploy to server

The permissions granted to user 'ACP06\IUSR_BUNNYXPC' are insufficient for performing this operation

Left by tuy on Mar 07, 2009 3:11 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Works for me, nice to see a bit of narrative bundled with a solution to a real problem!
Left by Woody Hayday on Mar 13, 2009 7:29 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Thanks Bill, from Mexico!
Left by DCH on Aug 12, 2009 3:01 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Bill - Thank you, Thank you, Thank you. after two days of tearing my hair out and Google searching I finally came upon your site and this solved a this problem of mine that stumped two of my developers.
Left by Franklin Peach on Aug 26, 2009 2:20 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
I'm not sure if this is exactly the same issue, but it's similar When we add a new user to the Active Directory group, that has permissions to view the report, they can access all sharepoint content, and web parts, except reports...they get the rsAccessDenied....It's a transient problem...gone in 2 days. We're using windows integrated security, and SP integrated mode for RS. Any ideas?
Left by K Doroe on Sep 02, 2009 10:56 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
I had the same error - completely stumped, local admin, admin rights on the db etc etc.
Turned out, as I was opening the page locally on my server, I had to right click and choose "Run As Administrator."
No doubt I am the only one daft enough to have that problem, haha.
Left by Johnny Mango on Nov 09, 2009 10:17 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
I get the same error here, when I try to run a Report on a Report server with a domain account, with the application Report Builder 2.0. This domain account has all the permissions on the report server.

I'm not sure that granting USERS Browse permission would be advisable.
Does anyone knows wich account is used in order to allow reports execution?
Left by Hugo on Jan 08, 2010 11:03 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
ok... got it. =)
Left by Hugo on Jan 08, 2010 12:18 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
I have the same error message, but a different situation. I have a report that jumps to another report. The user can run each report separately without any errors. But when they click on the hyperlink to jump to the other report, the rsaccessdenied message comes up. Any thoughts??
Left by critter on Jun 04, 2010 10:03 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
I am getting error while trying to deplyo the project in Reporting Server under SQL Server 2008 .

The error is like,
The permissions granted to user 'Dip-PC\Dip' are insufficient for performing this operation.

Please help me to resolve the same
Left by Dip on Jun 21, 2010 8:39 AM

# The attempt to connect to the report server failed issue in SSRS 2008
Requesting Gravatar...
Hi All,

I am using SQL 2008 reporting services, while calling the report from Dot Net application, I am getting error with the the below error message. Could any one help me out with any solution for this issue? Thanks in advance

The attempt to connect to the report server failed. Check your connection information and that the report server is a compatible version.
Left by Sandy on Sep 10, 2010 12:05 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Really resolved the problem. That's what I'm searching for.
Thank you.
Left by Bright Leon on Nov 05, 2010 2:35 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
To make the Report Manager work under Windows 7, I had to add the registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"LocalAccountTokenFilterPolicy"=dword:00000001

It is described here: http://support.microsoft.com/kb/951016/en

Now, the local administrator can login to http://localhost/reports.
Left by Robin on Dec 03, 2010 4:34 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Thanks Bill!
Left by Paul O on Dec 16, 2010 10:42 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Also on Windows 7. The solution offered by "Robin" above worked for me :-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"LocalAccountTokenFilterPolicy"=dword:00000001

It is described here: http://support.microsoft.com/kb/951016/en

Left by Paul T on Jan 25, 2011 7:39 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
I Still have error message but I have follow all the instruction.
error is :
Error rsAccessDenied : The permissions granted to user 'xxx\yyy' are insufficient for performing this operation.
Left by jack on Jan 26, 2011 10:44 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
Solved for me
-----
thanks this guy
-------------
http://www.gotknowhow.com/articles/reportserver-permissions-granted-are-insufficient-for-performing-this-operation-rsaccessdenied
Left by danis on Mar 11, 2011 1:52 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
you have posted on Sunday, May 01, 2005 and still save everybody's life for generations ... at least you saved mine .
THANK YOU !
Left by Waleed Aladin on Apr 13, 2012 3:18 PM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
ceci n'est pas un commentaire mais je voudrais de l'aide sur les droits de l'administrateur pour exécuter un projet de reporting server
Left by Diongue on Jun 17, 2013 11:17 AM

# re: SQL Server Reporting Services and rsAccessDenied
Requesting Gravatar...
GREAT !!!!!!! It worked for me..I was struggling with this for a long time and this simple solution worked...Thanks Bill J
Charlotte NC
Left by kalai on Jan 08, 2014 1:12 PM

Your comment:
 (will show your gravatar)


Copyright © Bill Jones Jr. | Powered by: GeeksWithBlogs.net | Join free