none
SSRS 2012 and SharePoint 2010 permissions problem

    Question

  • I have SSRS installed in SharePoint mode on my SharePoint server.  I've created a report library and uploaded a report.  When attempting to view any RS specific screens (Manage Data Sources, Manage Subscribtions, etc), I get the following error:

    The permissions granted to user 'DOMAIN\user' are insufficient for performing this operation. ---> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'DOMAIN\user' are insufficient for performing this operation.

    I am a Farm Administrator, Site Collection Administrator and I am a member of the Owners group on the site that the library is inheriting permissions from.  Other users that have the same permissions can access the screens, but I can't.  The log files aren't much help other than to show exactly which method is failing:

    w3wp!library!13!06/20/2012-18:12:12:: i INFO: Call to GetPermissionsAction(http://saf-portalXXXX.xxxxxx.com/AQXL/Charts/Prime Contract Action By Agency.rdl).
    w3wp!library!13!06/20/2012-18:12:12:: i INFO: Call to GetItemTypeAction(http://saf-portalXXXX.xxxxxx.com/AQXL/Charts/Prime Contract Action By Agency.rdl).
    w3wp!library!13!06/20/2012-18:12:12:: i INFO: Call to GetItemDataSourcesAction(http://saf-portalXXXX.xxxxxx.com/AQXL/Charts/Prime Contract Action By Agency.rdl).
    w3wp!library!13!06/20/2012-18:12:12:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: , Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'DOMAIN\user' are insufficient for performing this operation.;

    Has anyone seen this before or know where to look? Most information I can find is SQL 2008 R2 or earlier and not particularly relevant.

    Wednesday, June 20, 2012 10:15 PM

Answers

  • Is your site using Claims authentication by any chance?  If so, go to the list of All Users in your site.  You may see two entries for your user name.  One entry is for <DOMAIN>\<USERNAME> (NT account name) and the other entry is for i:0#.w|<DOMAIN>\<USERNAME> (Claims-encoded account name).  If this is the case, try deleting the entry for the NT account name and see if that resolves the error.

    This is actually a known issue, and the current plan is to fix this in SSRS 2012 SP1.

    Hope that helps.

    • Marked as answer by Jason Reineri Thursday, June 21, 2012 3:50 PM
    Thursday, June 21, 2012 4:49 AM
    Moderator

All replies

  • Is your site using Claims authentication by any chance?  If so, go to the list of All Users in your site.  You may see two entries for your user name.  One entry is for <DOMAIN>\<USERNAME> (NT account name) and the other entry is for i:0#.w|<DOMAIN>\<USERNAME> (Claims-encoded account name).  If this is the case, try deleting the entry for the NT account name and see if that resolves the error.

    This is actually a known issue, and the current plan is to fix this in SSRS 2012 SP1.

    Hope that helps.

    • Marked as answer by Jason Reineri Thursday, June 21, 2012 3:50 PM
    Thursday, June 21, 2012 4:49 AM
    Moderator
  • That fixed it, thanks.  I doubt I would have found that on my own.
    Thursday, June 21, 2012 3:50 PM
  • Hi Tristan,

    I'm seeing this behaviour with a Classic Mode web application as well.

    I'm using Sharepoint 2010 SP1 and RTM SQL 2012 with SSRS on a separate machine in a 2 server test farm.

    My user account is Local Admin, Farm Admin and Sysadmin in all SQL instances and yet when I try to manage SSRS in central Admin I get the 'The permissions granted to user 'DOMAIN\USER' are insufficient for performing this operation' error.

    The SSRS integration with Sharepoint is working correctly because I've published a test report which uses Kerberos delegation to my test site and it works OK - I see my end user credentials being delegated to my backend SQL database so I know that I have constrained delegation and the Claims To Windows Token service correctly configured.

    I just double-checked my web application and UseClaimsAuthentication is definitely set to False.

    Regards,


    http://www.iisadmin.co.uk

    Thursday, August 23, 2012 9:03 AM
  • Tristan,

    The first time I managed to resolve the issue with the solution you provided above, but it has returned, today I installed SP1 but the issue still resists, do you have any additional tips?

    Monday, May 27, 2013 8:47 PM