Manao
Check out the security permissions the folder where the report reisdes in and ensure that the userid or the group the user belongs to has at least browser access.
HTH
Manao
Check out the security permissions the folder where the report reisdes in and ensure that the userid or the group the user belongs to has at least browser access.
HTH
The permissions granted to user 'localmachine\ASPNET' are insufficient for performing this operation.
am using a report viewer on an aspx page that i call using javascript. the report work if the url have the port number for examplehttp://localhost:4254/adressofthereport but if i put for examplehttp://localmachinename/adressofthereport i get the permission error.
why this happen to me... please help.
i fix this inserting the localmachine\ASPNET user in the reports permissions
BUILTIN\administrator
localmachine\ASPNET
maybe you need to add dbowner o sysad access level to this user.
|||Thanks.I am having same problem and i found the solution thanks.
I have a reportViewer control on a webform. In my partial class I set the report path, server and parameters in the Page_Load. When I run the report I get this error:
Here is my code:
Dim u As New UriTypeConverter
Dim ReportParameters(0) As ReportParameter
ReportParameters(0) = New ReportParameter("ProjectKey", 262)
rv.ShowParameterPrompts = False
rv.ServerReport.ReportServerUrl = u.ConvertFromString("http://localhost/ReportServer/")
rv.ServerReport.ReportPath = "/Test/Duplicate_MIU_Report"
rv.ServerReport.SetParameters(ReportParameters)
I have NT AUTHORITY\NetworkService as the service account (it is grayed out so it is not possible to change), and I have Service Credentials as the credentials type in the database setup. There are no red X's. Still get the same error.
In addition, I get this DCOM error in the system log:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BA126AD1-2166-11D1-B1D0-00805FC1270E}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.
I'm not exactly sure what and how to do in Component Services admin tool.
|||This thread may help you with the DCOM error:
http://forums.microsoft.com/MSDN/showpost.aspx?postid=258889&siteid=1
|||Netman has both local activation AND execution|||Do you see Network Services part of RSExec role in your report server catalog db and temp db?|||Yes|||Yes, Network Services is RSExec role in report server catalog db and temp db.|||It looks like Network Service account is not allowed to set parameters. I am not sure what is the mininum permission set. Can you try adding the account as a content manager to the home folder?|||If I right-click in design view in VS2005, the report runs fine. It doesn't work when I try to run in a browser and is being served up by my dev IIS server.|||I have added the NetworkService as administrator and still no go.|||That did it. Was confused in the ReportManager. Simple fix. Seems like lots of people having same problem. Thank you for your help|||Sorry--Don't follow what the fix was. What did it?|||Went into Report Manager and gave NT Authority\NetworkService the necessary role assignments.
|||Thanks--got past that one, now I get to deal with the database access permissions lol...The permissions granted to user '[user]' are insufficient for performing this operation. (rsAccessDenied) Get Online Help
I have given role (literally every possible role just to see) access in SQL Manager without success. And the permissions on the directory were set to Everyone Full Control (just to try to get it to work).
Any ideas?
Hi,
Which folder are you trying to deploy to? Which OS are you using? Try allocating the Report Manager role to the user and also to the folder.
These links may be helpful
http://technet.microsoft.com/en-us/library/aa337491.aspx
http://msdn2.microsoft.com/en-us/library/aa237755(SQL.80).aspx
http://msdn2.microsoft.com/en-us/library/aa337471.aspx
Search for "Setting Permissions in Reporting Services" or "Using Role-based Security" in SQL Server Books Online.
HTH,
Suprotim Agarwal
--
http://www.dotnetcurry.com
--
|||
Thanks. But, I've already been through all of that. And, I've searched this group for answers. I see that some found a solution; but those modifications aren't working, in my case.
Do you know if there is a problem with the port? The port is currently set at 8888.
|||Another thought..
The Report Server machine that I am using is on a DOMAIN. The users are configured on the DOMAIN - not the local machine. The (2 Report Server) roles that are available from the Computer Management screen are not used with the users. However, they are added in SQL Manager (with their DOMAIN credentials) and given the proper roles (RSExecRole, etc). And the roles (2 filesystem) are assigned and given control over the directory for the Report Server configuration.
NT Authentication is being used. Does each network user need to be configured in "Computer Management -> Users/Groups" for some reason? Even though they are DOMAIN users - not LOCAL.
|||Never Mind. I added a DOMAIN user to the "Computer Management" Report Server roles and I still get the error.
|||Hi,
I am sure you must have done a lot of searching before asking this question, but at times the smallest of details can be helpful. So let us revisit this. I always follow these steps i noted sometime back and recommended by a mvp called bruce:
1. I hope you have gone through the link which i gave you earlier. That explains the role based security of reporting services. We have to use that to assign permissions. We will try not to give permissions using IIS.
2. Assuming you belong to the Local Admin group, create a local group on the deployment machine and add the domain users to that local group. Then assign this local group the appropriate role to access reporting services.
3. In IIS there are two sites Report Server and reports. Make sure that IIS has not allowed anonymous access for them.
HTH,
Suprotim Agarwal
--
http://www.dotnetcurry.com
--
|||
1. I hope you have gone through the link which i gave you earlier. That explains the role based security of reporting services. We have to use that to assign permissions. We will try not to give permissions using IIS.
Yep, I had been to that link even before you posted it.
2. Assuming you belong to the Local Admin group, create a local group on the deployment machine and add the domain users to that local group. Then assign this local group the appropriate role to access reporting services.
Yep. I have admin-ability on that machine. I created a group and added users to the group that was then given role access; and I tried giving role access directly to the users. Either way, I get the error.
3. In IIS there are two sites Report Server and reports. Make sure that IIS has not allowed anonymous access for them.
Yep. Using NT Authentication throughout.
Thanks. But, I've already been though all of that.
I have noticed that when going through Localhost (for testing it works), it shows that the Authentication is "NTLM"; but when going through the domain it shows that the Authentication is "Negotiate". I don't know if that makes a difference or not.
BTW.. I tried uninstalling the ReportServer stuff from Add/Remove and got an error (and then more errors) leading to the installer crashing. Now, ReportServer didn't actually uninstall (it is still there - in the GUI anyway); but doesn't work. And installing it again doesn't fix it. I was hoping that a fresh install would fix whatever it was. So, Report Services is completely broken at this point.
sqlI have a reportViewer control on a webform. In my partial class I set the report path, server and parameters in the Page_Load. When I run the report I get this error:
Here is my code:
Dim u As New UriTypeConverter
Dim ReportParameters(0) As ReportParameter
ReportParameters(0) = New ReportParameter("ProjectKey", 262)
rv.ShowParameterPrompts = False
rv.ServerReport.ReportServerUrl = u.ConvertFromString("http://localhost/ReportServer/")
rv.ServerReport.ReportPath = "/Test/Duplicate_MIU_Report"
rv.ServerReport.SetParameters(ReportParameters)
I have NT AUTHORITY\NetworkService as the service account (it is grayed out so it is not possible to change), and I have Service Credentials as the credentials type in the database setup. There are no red X's. Still get the same error.
In addition, I get this DCOM error in the system log:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BA126AD1-2166-11D1-B1D0-00805FC1270E}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.
I'm not exactly sure what and how to do in Component Services admin tool.
|||This thread may help you with the DCOM error:
http://forums.microsoft.com/MSDN/showpost.aspx?postid=258889&siteid=1
|||Netman has both local activation AND execution|||Do you see Network Services part of RSExec role in your report server catalog db and temp db?|||Yes|||Yes, Network Services is RSExec role in report server catalog db and temp db.|||It looks like Network Service account is not allowed to set parameters. I am not sure what is the mininum permission set. Can you try adding the account as a content manager to the home folder?|||If I right-click in design view in VS2005, the report runs fine. It doesn't work when I try to run in a browser and is being served up by my dev IIS server.|||I have added the NetworkService as administrator and still no go.|||That did it. Was confused in the ReportManager. Simple fix. Seems like lots of people having same problem. Thank you for your help|||Sorry--Don't follow what the fix was. What did it?|||Went into Report Manager and gave NT Authority\NetworkService the necessary role assignments.
|||Thanks--got past that one, now I get to deal with the database access permissions lol...I have a reportViewer control on a webform. In my partial class I set the report path, server and parameters in the Page_Load. When I run the report I get this error:
Here is my code:
Dim u As New UriTypeConverter
Dim ReportParameters(0) As ReportParameter
ReportParameters(0) = New ReportParameter("ProjectKey", 262)
rv.ShowParameterPrompts = False
rv.ServerReport.ReportServerUrl = u.ConvertFromString("http://localhost/ReportServer/")
rv.ServerReport.ReportPath = "/Test/Duplicate_MIU_Report"
rv.ServerReport.SetParameters(ReportParameters)
I have NT AUTHORITY\NetworkService as the service account (it is grayed out so it is not possible to change), and I have Service Credentials as the credentials type in the database setup. There are no red X's. Still get the same error.
In addition, I get this DCOM error in the system log:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BA126AD1-2166-11D1-B1D0-00805FC1270E}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.
I'm not exactly sure what and how to do in Component Services admin tool.
|||This thread may help you with the DCOM error:
http://forums.microsoft.com/MSDN/showpost.aspx?postid=258889&siteid=1
|||Netman has both local activation AND execution|||Do you see Network Services part of RSExec role in your report server catalog db and temp db?|||Yes|||Yes, Network Services is RSExec role in report server catalog db and temp db.|||It looks like Network Service account is not allowed to set parameters. I am not sure what is the mininum permission set. Can you try adding the account as a content manager to the home folder?|||If I right-click in design view in VS2005, the report runs fine. It doesn't work when I try to run in a browser and is being served up by my dev IIS server.|||I have added the NetworkService as administrator and still no go.|||That did it. Was confused in the ReportManager. Simple fix. Seems like lots of people having same problem. Thank you for your help|||Sorry--Don't follow what the fix was. What did it?|||Went into Report Manager and gave NT Authority\NetworkService the necessary role assignments.
|||Thanks--got past that one, now I get to deal with the database access permissions lol...Hi i am having this error when i am running my default1.aspx page in localhost.I am using sql server 2005 reporting services and i have made one report in business intelligence tools reporting service through wizard.And deploy it it is running in report server.I am using one page that is default1.aspx and using report viewer and set the path that is debugging and showing that report but when i am running that in url writehttp://localhost/testdemo/default1.aspx so it is giving error
that error is"The Permission Granted to user "UserName/ASPNET" is insufficient for performing this operation.(rsAccess Denied)
Please help me to solve this problem.
Hiswapnil.malviya ,
See posthttp://forums.asp.net/t/1168322.aspx
Please do not make duplicated posts. Thanks for your cooperatoin. thanks
The permissions granted to user '[user]' are insufficient for performing this operation. (rsAccessDenied) Get Online Help
I have given role (literally every possible role just to see) access in SQL Manager without success. And the permissions on the directory were set to Everyone Full Control (just to try to get it to work).
Any ideas?
Hi,
Which folder are you trying to deploy to? Which OS are you using? Try allocating the Report Manager role to the user and also to the folder.
These links may be helpful
http://technet.microsoft.com/en-us/library/aa337491.aspx
http://msdn2.microsoft.com/en-us/library/aa237755(SQL.80).aspx
http://msdn2.microsoft.com/en-us/library/aa337471.aspx
Search for "Setting Permissions in Reporting Services" or "Using Role-based Security" in SQL Server Books Online.
HTH,
Suprotim Agarwal
--
http://www.dotnetcurry.com
--
|||
Thanks. But, I've already been through all of that. And, I've searched this group for answers. I see that some found a solution; but those modifications aren't working, in my case.
Do you know if there is a problem with the port? The port is currently set at 8888.
|||Another thought..
The Report Server machine that I am using is on a DOMAIN. The users are configured on the DOMAIN - not the local machine. The (2 Report Server) roles that are available from the Computer Management screen are not used with the users. However, they are added in SQL Manager (with their DOMAIN credentials) and given the proper roles (RSExecRole, etc). And the roles (2 filesystem) are assigned and given control over the directory for the Report Server configuration.
NT Authentication is being used. Does each network user need to be configured in "Computer Management -> Users/Groups" for some reason? Even though they are DOMAIN users - not LOCAL.
|||Never Mind. I added a DOMAIN user to the "Computer Management" Report Server roles and I still get the error.
|||Hi,
I am sure you must have done a lot of searching before asking this question, but at times the smallest of details can be helpful. So let us revisit this. I always follow these steps i noted sometime back and recommended by a mvp called bruce:
1. I hope you have gone through the link which i gave you earlier. That explains the role based security of reporting services. We have to use that to assign permissions. We will try not to give permissions using IIS.
2. Assuming you belong to the Local Admin group, create a local group on the deployment machine and add the domain users to that local group. Then assign this local group the appropriate role to access reporting services.
3. In IIS there are two sites Report Server and reports. Make sure that IIS has not allowed anonymous access for them.
HTH,
Suprotim Agarwal
--
http://www.dotnetcurry.com
--
|||
1. I hope you have gone through the link which i gave you earlier. That explains the role based security of reporting services. We have to use that to assign permissions. We will try not to give permissions using IIS.
Yep, I had been to that link even before you posted it.
2. Assuming you belong to the Local Admin group, create a local group on the deployment machine and add the domain users to that local group. Then assign this local group the appropriate role to access reporting services.
Yep. I have admin-ability on that machine. I created a group and added users to the group that was then given role access; and I tried giving role access directly to the users. Either way, I get the error.
3. In IIS there are two sites Report Server and reports. Make sure that IIS has not allowed anonymous access for them.
Yep. Using NT Authentication throughout.
Thanks. But, I've already been though all of that.
I have noticed that when going through Localhost (for testing it works), it shows that the Authentication is "NTLM"; but when going through the domain it shows that the Authentication is "Negotiate". I don't know if that makes a difference or not.
BTW.. I tried uninstalling the ReportServer stuff from Add/Remove and got an error (and then more errors) leading to the installer crashing. Now, ReportServer didn't actually uninstall (it is still there - in the GUI anyway); but doesn't work. And installing it again doesn't fix it. I was hoping that a fresh install would fix whatever it was. So, Report Services is completely broken at this point.
sqlHello,
I am new to Reporting Services 2005, so please bare with me. I have set up a new report that runs fine when I run it, but I am the administrator on the server. When I have a user go to the same web page and attempt to run the report, they receive an error that says something along the lines of "User account 'DomainName\UserName' does not have sufficient access to ReportServer... rsAccessDenied." I have seen several threads on the web that point to IIS, and some that point to the "Reporting Services Configuration Manager" under "Windows Service Identity". In my Windows Services Identity, I have the server set up as "Built-in Account = 'Local System'". Everything seems to be running perfect for me, I just can’t seem to get non-admin accounts to run reports from there local workstations. Please let me know what my settings should be on the server. Like I said, the web page comes up fine for all users, but when they click on the hyperlink that runs the report, they receive the Reporting Services error message, but it runs fine for me. Your help would be greatly appreciated.
Thanks,
Stephen Rooker
use the following:
'rs.Credentials = System.Net.CredentialCache.DefaultCredentials
Dim LogonCredentials As System.Net.NetworkCredential
Dim Items As rs.CatalogItem
LogonCredentials = New System.Net.NetworkCredential("username", "password", "domainname")
rs.Credentials = LogonCredentials
rs.PreAuthenticate = True
|||Thanks for your help. Here's what I did to fix this issue. I'll enter detail for any other developers out there that may come across this issue and need help.
In your internet browser address bar, enter http://ServerName/Reports . I did this from the server, but you may be able to do this from anywhere on the network as long as you have permissions. Select the Properties tab, and then click on New Role Assignment. Add network User Name or add your network Group in the text box. I recommend using network groups due to maintenance. I just entered the group name I wanted to allow access, and then I checked the Browser role check box only. The Browser role is basically run reports only. You may want to review what the other check boxes allow, but I only added my users to the Browser role and it worked for them. When finished, click the Apply button at the bottom of the page. The domain name was added for me automatically after I clicked Apply, so make sure you see your domain name in front of the user name or group after you click Apply.
Now go back to the Contents tab, select Data Sources, and then select your data source name. The data source that you used for your reports. In there, make sure all of the settings are correct. I needed to make sure the user name and password are correct so a successful data connection is made. Click Apply at the bottom of the page when finished.
Doing this fixed my issues with rsAccessDenied error message.
Thanks,
Stephen Rooker
|||Cheers mate you helped me fix my issue.Hello,
I am new to Reporting Services 2005, so please bare with me. I have set up a new report that runs fine when I run it, but I am the administrator on the server. When I have a user go to the same web page and attempt to run the report, they receive an error that says something along the lines of "User account 'DomainName\UserName' does not have sufficient access to ReportServer... rsAccessDenied." I have seen several threads on the web that point to IIS, and some that point to the "Reporting Services Configuration Manager" under "Windows Service Identity". In my Windows Services Identity, I have the server set up as "Built-in Account = 'Local System'". Everything seems to be running perfect for me, I just can’t seem to get non-admin accounts to run reports from there local workstations. Please let me know what my settings should be on the server. Like I said, the web page comes up fine for all users, but when they click on the hyperlink that runs the report, they receive the Reporting Services error message, but it runs fine for me. Your help would be greatly appreciated.
Thanks,
Stephen Rooker
use the following:
'rs.Credentials = System.Net.CredentialCache.DefaultCredentials
Dim LogonCredentials As System.Net.NetworkCredential
Dim Items As rs.CatalogItem
LogonCredentials = New System.Net.NetworkCredential("username", "password", "domainname")
rs.Credentials = LogonCredentials
rs.PreAuthenticate = True
|||Thanks for your help. Here's what I did to fix this issue. I'll enter detail for any other developers out there that may come across this issue and need help.
In your internet browser address bar, enter http://ServerName/Reports . I did this from the server, but you may be able to do this from anywhere on the network as long as you have permissions. Select the Properties tab, and then click on New Role Assignment. Add network User Name or add your network Group in the text box. I recommend using network groups due to maintenance. I just entered the group name I wanted to allow access, and then I checked the Browser role check box only. The Browser role is basically run reports only. You may want to review what the other check boxes allow, but I only added my users to the Browser role and it worked for them. When finished, click the Apply button at the bottom of the page. The domain name was added for me automatically after I clicked Apply, so make sure you see your domain name in front of the user name or group after you click Apply.
Now go back to the Contents tab, select Data Sources, and then select your data source name. The data source that you used for your reports. In there, make sure all of the settings are correct. I needed to make sure the user name and password are correct so a successful data connection is made. Click Apply at the bottom of the page when finished.
Doing this fixed my issues with rsAccessDenied error message.
Thanks,
Stephen Rooker
|||Cheers mate you helped me fix my issue.