Accessing all reports
If your situation does not require report isolation, then you can simply follow the instructions included within the following article to provide access to all SSRS reports (a default install of RayVentory Server (RVS) creates local Windows groups and not domain groups):-
https://raynetgmbh.zendesk.com/hc/en-us/articles/115001994903-RMS200264
Report isolation
Custom reports
If you have created a custom report, follow the steps included within the following articles SSRS chapter to add it to SSRS:- https://raynetgmbh.zendesk.com/hc/en-us/articles/360001079446-RVY200378
Note: If your custom report drill down into sub-reports, then those sub-reports will also need to be uploaded.
Existing reports
If you want to provide access to certain default RVS reports, then instead of downloading them and uploading them to the relevant folder, you can simply link them to that location instead:
Note: If a linked report drills down into a sub-report, then the relevant user group will need to be assigned the browser role to that sub-report.
RVS console or RayManageSoftWeb application
If RVS console users should be able to access these reports, then follow the steps included within article RVY200378's Database chapter. The same applies if the RayManageSoftWeb application entry point will be utilised.
Folder access
If a group of users require access to all reports within a folder, then you need to create a browser role for that group against that folder:
Note: The group can be either domain or local which must already exist.
Report access
If a group of users require access to a specific report within a folder, then you need to create a browser role for that group against that report and any sub-report it is associated with:
Database
Stored procedures
The attached 'Grant_Role.sql' file contains queries that will grant RVS's mgs_reader database role EXECUTE permissions against certain stored procedures which are utilised by certain default reports, as well RayManageSoftWeb access.
Note: Any custom reports that utilise stored procedures will need to have this permission granted to that role too.
Data reader
In order for these report users to actually see data within the reports they have access to, they need to be given read access to the database. This can be achieved by making their domain groups members of the 'MGS Data Readers' local Windows group on the RVS:
Report entry points
SSRS directly
For users that have access to a specific folder:-
http://<FQDN, hostname or IP of SSRS server>/reports_sqlexpress/browse/RMSReporting/Custom%20Reports
For users that have access to a specific report:-
http://<FQDN, hostname or IP of SSRS server>/reports_sqlexpress/report/RMSReporting/Custom%20Reports/Hardware%20Readiness
RayManageSoftWeb
http://<FQDN, hostname or IP of SSRS server>/RayManageSoftWeb
Note 1: Even if a user cannot run a report, they will be presented with all reports that are available via this IIS application.
Note 2: If a user presses a report tile and nothing happens it means that they do not have at least SSRS browser role permissions for that report.
Comments