TFS and Reporting Services - Domain vs. Local Users

Question

            I run a small development shop and I’m currently using the RTM version of TFS for internal configuration management and as a means to provide structure to our development projects by using MSF 4.0 for Agile Development.

 

. My goal is use the portal portion to allow our customers to contribute to the project documents, and also to view the canned reports. Currently, TFS is configured on a server which is part of our domain. All of my internal users (i.e. developers) are configured to connect with their domain accounts. I would not like to give customers domain accounts. My solution for this has been to add local users and groups to control access. For the most part this seems to work properly except that right now, the users who are not part of the domain are unable to see the reports.

 

I used the “TFS Administration Tool” from (http://www.gotdotnet.com/codegallery/codegallery.aspx?id=cea30722-cd0a-4ef4-9c75-a5a5e4932b05) to set the permissions on all 3 tiers of the application. I checked the settings manually in reporting services and the users have appropriate permissions (the local users are set up as publishers) however attempts to get to the reports either via the TFS portal or directly  result in an rsAccessDenied error.

 

Anyone have any ideas?

 

Answer 1

Hi Daniel,

Can you verify that the local users are permissioned on the report server? You can do this by going to http://yourapptier/reports, selecting the project you are working with, and looking at the properties/security tab. Make sure the local users are specified there. I am not familiar with how the tool you reference works. If the users are not specified there, you can add them either at the project level (modify the permissions on the folder) or on the server level (modify permissions at the root, and enable the permissions to be inherited by the projects). More info on how these properties work can be found here:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rswork/htm/rms_security_v1_3hia.asp

You will need to be a "Content Manager" on the reporting server to perform these actions.

Thanks,

tom

 

Answer 2

Hi Daniel,

Were you able to resolve this problem? Please let me know if we can help further.

You can also consult the Reporting Services forum as they have more domain knowledge than we do about RS: http://forums.microsoft.com/MSDN/ShowForum.aspx?ForumID=82&SiteID=1

Thanks!

Mauli