Accessing all reports
If your situation does not require report isolation, then you can simply follow the instructions included within the following article to provide access to all SSRS reports (a default install of RayVentory Server (RVS) creates local Windows groups and not domain groups):-
If you have created a custom report, follow the steps included within the following articles SSRS chapter to add it to SSRS:- https://raynetgmbh.zendesk.com/hc/en-us/articles/360001079446-RVY200378
Note: If your custom report drill down into sub-reports, then those sub-reports will also need to be uploaded.
If you want to provide access to certain default RVS reports, then instead of downloading them and uploading them to the relevant folder, you can simply link them to that location instead:
Note: If a linked report drills down into a sub-report, then the relevant user group will need to be assigned the browser role to that sub-report.
RVS console or RayManageSoftWeb application
If RVS console users should be able to access these reports, then follow the steps included within article RVY200378's Database chapter. The same applies if the RayManageSoftWeb application entry point will be utilised.
If a group of users require access to all reports within a folder, then you need to create a browser role for that group against that folder:
Note: The group can be either domain or local which must already exist.
If a group of users require access to a specific report within a folder, then you need to create a browser role for that group against that report and any sub-report it is associated with:
The attached 'Grant_Role.sql' file contains queries that will grant RVS's mgs_reader database role EXECUTE permissions against certain stored procedures which are utilised by certain default reports, as well RayManageSoftWeb access.
Note: Any custom reports that utilise stored procedures will need to have this permission granted to that role too.
In order for these report users to actually see data within the reports they have access to, they need to be given read access to the database. This can be achieved by making their domain groups members of the 'MGS Data Readers' local Windows group on the RVS:
Report entry points
For users that have access to a specific folder:-
For users that have access to a specific report:-
Note 1: Even if a user cannot run a report, they will be presented with all reports that are available via this IIS application.
Note 2: If a user presses a report tile and nothing happens it means that they do not have at least SSRS browser role permissions for that report.