IE report access to normal user (SCCM 2012 R2)

Question

Hello All
Trying to wrap my head around allowing "normal user" to view/run reports via internet explorer http://servername/Reports
I created a new group called SCCMReportViewers in AD and added one user to that group, then I went to SCCM 2012 and created a new security role by coping existing one called read-only analyst and called it reporting user. On that new role I changed all permissions
to run reports and nothing else. Then I added that new AD group under Administrative Users on SCCM 2012 server with security role that I made in previous step (reporting user)
When I try to access http://someserver/Reports I get logon window and after I log on as "normal user" I do not see any reports at all. I even added sccmreportviewers group permission directly on one of reports with permission to run reports and
browse but that didn't get me any closer to solution. Mind you admin users on sccm 2012 can see all reports and run them with out problems.
PS
SQL2012 server is running on another server then sccm 2012 and reporting service is installed on SQL2012 server

Answer 1

Hello All
Trying to wrap my head around allowing "normal user" to view/run reports via internet explorer http://servername/Reports
I created a new group called SCCMReportViewers in AD and added one user to that group, then I went to SCCM 2012 and created a new security role by coping existing one called read-only analyst and called it reporting user. On that new role
I changed all permissions to run reports and nothing else. Then I added that new AD group under Administrative Users on SCCM 2012 server with security role that I made in previous step (reporting user)
When I try to access http://someserver/Reports I get logon window and after I log on as "normal user" I do not see any reports at all.
The SSRS reports will not be displayed within the list of available reports if the logged-on-user doesn't have the role/permissions within ConfigMgr to access the data needed to create the report. (well, that how it is for us, and that seems to be fairly
logical to me)
e.g. If the user doesn't have the role/permissions to the status messaging data, that user will not see any status message reports available to choose from. (after all, what value is there in allowing somebody to run a report that will never return any result
rows...)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)