Skip to main content

Show permissions on all SSRS folders

Here is a useful (if rather verbose) script that will show users and their permissions from the root folder on SQL Server Reporting Services downwards. It should work on most if not all versions of the product. You can use it as is, or as a starting point to create your own aggregations etc.

USE ReportServer;

SELECT
CASE
              WHEN (SubString(c.[Path], 1, Len(c.[Path]) - (CharIndex('/', Reverse(c.[Path])) - 1))) = ''
                     THEN '<root folder>'
              ELSE SubString(c.[Path], 1, Len(c.[Path]) - (CharIndex('/', Reverse(c.[Path])) - 1))
              END AS Folder
       ,CASE
              WHEN c.Type = 1
                     THEN 'Path'
              WHEN c.Type = 2
                     THEN 'Report'
              WHEN c.Type = 3
                     THEN 'Resource'
              WHEN c.Type = 4
                     THEN 'Linked Report'
              WHEN c.Type = 5
                     THEN 'Data Source'
              WHEN c.Type = 6
                     THEN 'Report Model'
              WHEN c.Type = 7
                     THEN 'Report Part'
              WHEN c.Type = 8
                     THEN 'Shared Dataset'
              END AS 'ObjectType'
       ,CASE
              WHEN c.NAME = ''
                     THEN '<root folder>'
              ELSE c.NAME
              END AS ObjectName
       ,u.UserName
       ,r.RoleName AS [Permissions]
FROM [users] u
INNER JOIN PolicyUserRole pu
       ON u.userid = pu.userid
INNER JOIN roles r
       ON pu.roleid = r.roleid
INNER JOIN CATALOG c
       ON pu.PolicyID = c.PolicyID
ORDER BY c.NAME
       ,u.UserName


<end>

Comments

Popular posts from this blog

How to move the Microsoft Assessment and Planning Toolkit (MAP) database to a different drive

The Microsoft Assessment and Planning Toolkit (MAP) is a very useful tool for scanning your network to find instances of SQL Server plus all manner of detailed information about the installed product, OS and hardware it sits on.


<Click image to enbiggen>
There is an issue with it the database it uses to store the data it collects, however. Assuming you don't have an instance called MAPS on your server, the product will install using LocalDB (a cut down version of SQL Server Express) and puts the databases on your C: drive. If you then scan a large network you could easily expand the database to 10GB which may cause issues on a server when that drive is often one of the smallest. However, there is a simple solution: connect to LocalDB using Management Studio, detach the databases, move to a different drive, set permissions on the new location if required and reattach the database. How do you connect to LocalDB? Here you go:

Connect to (localdb)\MAPTOOLKIT


The databases I move…

Fun and games with the Management Data Warehouse (MDW and Data Collectors)

The SQL Server Management Data Warehouse (when you first come across it) seems to promise so much if the verbiage from Microsoft and some other websites is to to believed. But when you install it you may find that it is not as useful as it could be. This is a shame but we are currently only on v2 of the product with SQL 2012 so one hopes it will improve in subsequent versions.

However, it probably is worth playing with if you have never used it before - at least you can show your boss some reports on general server health when he asks for it and you have nothing else in place.

There is one big problem with it though if you decide that you don't want to use it any more, uninstalling it is not supported! Mad, I know. But as usual some very helpful people in the community have worked out, what seems to me, a pretty safe way of doing it.

I had a problem with my MDW. The data collector jobs were causing a lot of deadlocking on some production servers and impacting performance. It looks…

How to configure the SSAS service to use a Domain Account

NB Updating SPNs in AD is not for the faint hearted plus I got inconsistent results from different servers. Do so at your own risk! If you need the SSAS account on a SQL Server to use a domain account rather than the local “virtual” account “NT Service\MSSQLServerOLAPService”. You may think you just give the account login permissions to the server, perhaps give it sysadmin SQL permissions too. However, if you try and connect to SSAS remotely you may get this error:

Authentication failed. (Microsoft.AnalysisService.AdomdClient) The target principal name is incorrect (Microsoft.AnalysisService.AdomdClient)

From Microsoft: “A Service Principle Name (SPN) uniquely identifies a service instance in an Active Directory domain when Kerberos is used to mutually authenticate client and service identities. An SPN is associated with the logon account under which the service instance runs. For client applications connecting to Analysis Services via Kerberos authentication, the Analysis Services clien…