rsInvalidPolicyDefinition - migration to another domain .....

Hi friends,

We have a problem with our RS2005 after migration into another domain.

The problem is that we have got duplicate access rights for the same AD usergroup.
When trying to remove or add a new AD group we get the error msg - "... role assignment is not valid. The role assignment is either empty or it specifies a user or group name that is already used in an existing role assignment for the current item. (rsInvalidPolicyDefinition)"

Books online gives no answers and neither does other serach engines .....

Anyone having a hint or solution .......

We have the same problem. Cannot remove some roles. I'm worried about if we need to make changes later, will we have to destroy the entire folder structure & re-create it in order to get rid of these roles/permissions?

rsInvalidPolicyDefinition - migration to another domain .....

Hi friends,

We have a problem with our RS2005 after migration into another domain.

The problem is that we have got duplicate access rights for the same AD usergroup.
When trying to remove or add a new AD group we get the error msg - "... role assignment is not valid. The role assignment is either empty or it specifies a user or group name that is already used in an existing role assignment for the current item. (rsInvalidPolicyDefinition)"

Books online gives no answers and neither does other serach engines .....

Anyone having a hint or solution .......

We have the same problem. Cannot remove some roles. I'm worried about if we need to make changes later, will we have to destroy the entire folder structure & re-create it in order to get rid of these roles/permissions?sql

RSCONFIG round 2

I am being required to change the user account on my MSRS instance.
We are going to use a domain level account and I have given it the
rights that are specified on the books online.
"The account specified is granted public and RSExecRole roles for the
reportserver database, and the RSExecRole role for the master, msdb and
ReportServerTempDB databases.
When I try to run RSCONFIG with the new login, I get a SECURITY ERROR.
When I run RSCONFIG with a -t switch, I get the following printout.
System.Security.SecurityException: Security error.at
Microsoft.ReportingServices.ConfigManagement.ConfigFileApp.ConnectToWmi()
at
Microsoft.ReportingServices.ConfigManagement.ConfigFileApp.InstanceMain()
at
Microsoft.ReportingServices.BaseCmdLine.CommandLineMain(String[] args,
BaseCmdLine instance)
Any guesses on what security setting I am missing?The problem occured because I was running the RSCONFIG from a mapped drive.
I created a share in the folder where the RSCONFIG utility resides and then
I mapped a drive to that location. so when I ran the utility, it was running
from a location like z:\RSCONFG ...
That does not work. When I traversed the drive to the actual location of the
config and ran it from there, all worked as designed.
Moral is there are very few shortcuts that work. ;)
--
Leo Bonnes
"Lou" wrote:
> I am being required to change the user account on my MSRS instance.
> We are going to use a domain level account and I have given it the
> rights that are specified on the books online.
> "The account specified is granted public and RSExecRole roles for the
> reportserver database, and the RSExecRole role for the master, msdb and
> ReportServerTempDB databases.
> When I try to run RSCONFIG with the new login, I get a SECURITY ERROR.
> When I run RSCONFIG with a -t switch, I get the following printout.
> System.Security.SecurityException: Security error.at
> Microsoft.ReportingServices.ConfigManagement.ConfigFileApp.ConnectToWmi()
> at
> Microsoft.ReportingServices.ConfigManagement.ConfigFileApp.InstanceMain()
> at
> Microsoft.ReportingServices.BaseCmdLine.CommandLineMain(String[] args,
> BaseCmdLine instance)
> Any guesses on what security setting I am missing?
>

rsAccessDenied even for the Content Manager role

I have the Content Manager rights on a folder and on a report for my user.
When I try to edit ther report properties I got the error
the permissions granted to user `domain\user` are insufficient for
performing this operation (rsAccessDenied)
I am able to upload, create folders, create data source, upload file, but
not to view the report properties
--
AlexSounds like someone changed the Security for that Particular report, so you
can't mess with it...
All of the things you can do, have perms at the folder level...Report
properties can be set at the report level, so if someone removed
ContentManager Role from the specific report, you'd get the behaviour you are
seeing..
Hope this helps.
--
Wayne Snyder MCDBA, SQL Server MVP
Mariner, Charlotte, NC
I support the Professional Association for SQL Server ( PASS) and it''s
community of SQL Professionals.
See you at the PASS Conference!
"Alex" wrote:
> I have the Content Manager rights on a folder and on a report for my user.
> When I try to edit ther report properties I got the error
> the permissions granted to user `domain\user` are insufficient for
> performing this operation (rsAccessDenied)
> I am able to upload, create folders, create data source, upload file, but
> not to view the report properties
> --
> Alex|||I just verified it and It has the Content Manager perms
I even created a new folder with the builtin\Administrators Content
Manager and the Server\user Content Manager too.
I checked the report's security tab, and in all the reports in that folder I
have both, the Builtin\Administrators Content Manager and the Server\user
Content Manager permissions.
But Still having the rsAccessDenied Error
I would appreciate very much any help about it
Thanks
--
Alex
"Wayne Snyder" wrote:
> Sounds like someone changed the Security for that Particular report, so you
> can't mess with it...
> All of the things you can do, have perms at the folder level...Report
> properties can be set at the report level, so if someone removed
> ContentManager Role from the specific report, you'd get the behaviour you are
> seeing..
> Hope this helps.
> --
> Wayne Snyder MCDBA, SQL Server MVP
> Mariner, Charlotte, NC
> I support the Professional Association for SQL Server ( PASS) and it''s
> community of SQL Professionals.
> See you at the PASS Conference!
>
> "Alex" wrote:
> > I have the Content Manager rights on a folder and on a report for my user.
> >
> > When I try to edit ther report properties I got the error
> > the permissions granted to user `domain\user` are insufficient for
> > performing this operation (rsAccessDenied)
> >
> > I am able to upload, create folders, create data source, upload file, but
> > not to view the report properties
> >
> > --
> > Alex|||I had the same problem you described and fixed it by granting the NT group
the 'Content Manager' permissions at the 'Root' of the Report Server site.
After doing this the permissions were applied correctly to the Folders
underneath this.
Hope this helps.
Diran
"Alex" wrote:
> I just verified it and It has the Content Manager perms
> I even created a new folder with the builtin\Administrators Content
> Manager and the Server\user Content Manager too.
> I checked the report's security tab, and in all the reports in that folder I
> have both, the Builtin\Administrators Content Manager and the Server\user
> Content Manager permissions.
> But Still having the rsAccessDenied Error
> I would appreciate very much any help about it
> Thanks
> --
> Alex
>
> "Wayne Snyder" wrote:
> > Sounds like someone changed the Security for that Particular report, so you
> > can't mess with it...
> >
> > All of the things you can do, have perms at the folder level...Report
> > properties can be set at the report level, so if someone removed
> > ContentManager Role from the specific report, you'd get the behaviour you are
> > seeing..
> >
> > Hope this helps.
> > --
> > Wayne Snyder MCDBA, SQL Server MVP
> > Mariner, Charlotte, NC
> >
> > I support the Professional Association for SQL Server ( PASS) and it''s
> > community of SQL Professionals.
> > See you at the PASS Conference!
> >
> >
> > "Alex" wrote:
> >
> > > I have the Content Manager rights on a folder and on a report for my user.
> > >
> > > When I try to edit ther report properties I got the error
> > > the permissions granted to user `domain\user` are insufficient for
> > > performing this operation (rsAccessDenied)
> > >
> > > I am able to upload, create folders, create data source, upload file, but
> > > not to view the report properties
> > >
> > > --
> > > Alex|||Thanks Diran,
It worked, I just granted the "My Reports" permissions.
Thanks again!
--
Alex
"Diran" wrote:
> I had the same problem you described and fixed it by granting the NT group
> the 'Content Manager' permissions at the 'Root' of the Report Server site.
> After doing this the permissions were applied correctly to the Folders
> underneath this.
> Hope this helps.
> Diran
>
> "Alex" wrote:
> > I just verified it and It has the Content Manager perms
> >
> > I even created a new folder with the builtin\Administrators Content
> > Manager and the Server\user Content Manager too.
> >
> > I checked the report's security tab, and in all the reports in that folder I
> > have both, the Builtin\Administrators Content Manager and the Server\user
> > Content Manager permissions.
> >
> > But Still having the rsAccessDenied Error
> >
> > I would appreciate very much any help about it
> > Thanks
> >
> > --
> > Alex
> >
> >
> > "Wayne Snyder" wrote:
> >
> > > Sounds like someone changed the Security for that Particular report, so you
> > > can't mess with it...
> > >
> > > All of the things you can do, have perms at the folder level...Report
> > > properties can be set at the report level, so if someone removed
> > > ContentManager Role from the specific report, you'd get the behaviour you are
> > > seeing..
> > >
> > > Hope this helps.
> > > --
> > > Wayne Snyder MCDBA, SQL Server MVP
> > > Mariner, Charlotte, NC
> > >
> > > I support the Professional Association for SQL Server ( PASS) and it''s
> > > community of SQL Professionals.
> > > See you at the PASS Conference!
> > >
> > >
> > > "Alex" wrote:
> > >
> > > > I have the Content Manager rights on a folder and on a report for my user.
> > > >
> > > > When I try to edit ther report properties I got the error
> > > > the permissions granted to user `domain\user` are insufficient for
> > > > performing this operation (rsAccessDenied)
> > > >
> > > > I am able to upload, create folders, create data source, upload file, but
> > > > not to view the report properties
> > > >
> > > > --
> > > > Alex