Reporting Services 2012 Item-level permissions issue

Hello,
We have a SQL Reporting services 2012 Scale-Out solution that uses a remote report SQL 2008 R2 database. The report server is used for reports consolidation - different teams within the company have different folders to which they have access and can upload
reports, create/change data sources, etc within their folders. Let's say I create a team folder called Finance beneath the root folder. Only admins have Content manager role applied to the root folder and system admin as a system role to the Report server.
I grant Content manager role for the Finance folder to DOMAIN\Finance team, the users are able to create a data source, however they cannot access it or view its properties afterwards. Why is this happening? When I grant DOMAIN\Finance team the Browser role
to the root folder, they are able to amend the data source in the Finance folder and view its properties, but they are also able to view the reports and folders in the root folder of the Report server and I do not want that. Is this a standard behaviour of
SSRS? How can I fix it?
Thanks in advance.

Hello,
Which folder did data sources stored ? the Data sources folder under the root folder on Report Manager or the Custom Finance folder which you had grant Content Manager role? How about grant only Browser role on the Finance folder to the specify team? Did
you modify the task of the Content Manager and Browser role?
By default, the Content Manager includes "Manage data sources" and "View data sources" task which means uses with this role can view and manage data sources, while Browser role did not include these tasks. You can check the task of the Content Manager
role by connect to Reporting Services with SQL Server Management Studio and check role under Security.
Reference:Predefined Roles
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support

Similar Messages

SharePoint 2010 Item level permissions nightmare...how do I escape this madness?

We have a custom SharePoint 2010 application that helps process job req. documents from 200+ partner companies. Each company can only see its own job req. documents (done using item level permissions in one document library).
The number of documents is getting close to 3k. I've read that once you get over 5k, you'll see a huge performance hit because of the number of unique security scopes.
Creating 200+ libraries is out of the question. That just seems like an even bigger logistical nightmare...especially since we add partners every month almost. We have reports that run off of this data and querying that many libraries would be nuts.
Next would be making folders for each company. A lot of recoding would need to be done, but my biggest concern will be not being able to sort and filter properly.
I've tried writing a PowerShell script to copy everything into folders in a new library and the filtering doesn't work even after messing around with the view to not show the folders at all.
The last thing I'm considering is just archiving older data that may no longer be relevant by year or something.
Has anyone else run into a similar issue?
Any suggestions?

Hi,
Once you have exceeded the threshold limit, certainly there will be performance issues. However, you can still iterate though lists/libraries that exceed threshold limit by workaround here:
List Threshold
Additionally, please refer following link which demonstrates how you can implement sorting/paging for lists exceeding threshold limit:
https://social.msdn.microsoft.com/Forums/en-US/4f788144-773c-4e63-8c1f-1e51f1c0a82f/client-object-model-fsobjtype-and-list-view-threshold?forum=sharepointdevelopmentprevious
Hope it helps!
Thanks,
Avni Bhatt
If this helped you resolve your issue, please mark it Answered

Reporting Services 2012 for SharePoint and SQL Server Agent "Subscriptions and Alerts"

After installing Reporting Services for SharePoint (Denali) in my test farm, I'm trying to configure the "SQL Server Agent" access for Reporting Services. From Central Admin I'm going to the Reporting Service applicaiton configuration screen and selecting
"Provision Subscriptions and Alerts". I've tried both options on this screen. I've manually executed the "download sql script" in SQL Server, as well as entering a user with SQL sys admin rights on the SQL server into the login fields on the screen.
The role and permissions have been created for the application pool service account, but Reporting Services is still trying to connect with the annonymous login because I'm getting the following alert each time I open the "Provision Subscriptions and Alerts"
screen:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'
The "status" on the screen still shows "SQL Server Agent State cannot be determined". Has anyone else seen this?
Thanks!!

Thanks for your reply!
1) Looks like the new Reporting Services does not run as a Windows Service so it's not listed in the "Configure Service Accounts" pulldown. As a result, I don't see how to set the service account. It's only assigned to an application pool.
I installed it into an existing application pool and that application pool "is" in the list and has a domain service account already assigned.
2) Which users need to be in here in order to configure the "Provision Subscriptions and Alerts" screen? I already have the farm admin account which is the account I use when running Central Admin.
3) As mentioned in #1, I've installed Reporting Services into an existing application pool with other service apps.
4) This link is for Reporting Services 2008 R2 which is very different install process. But I did follow the SQL Server Reporting Services 2012 RC0 installation instructions and the Reporting Services is functioning correctly with no errors.
I'm just not able to configure the sceduling the alerting with interfaces with the SQL Server Agent.
Thanks!

Reporting Services 2012 - "Database is up to date, but some sites are not completely upgraded"

Running SharePoint 2010 SP1 (Feb-Mar 2012 CU)
Is there any official word from Microsoft regarding the issue with SQL Server Reporting Services 2012 for SharePoint where 2 of the reporting service application databases show "Database is up to date, but some sites are not completely upgraded".
ReportingServiceDB - Database is up to date, but some sites are not completely upgraded
ReportingServiceDB_Alerting - Database is up to date, but some sites are not completely upgraded
I'm building the new Reporting Services into a new DEV environment and I'd like to know what the official word is from Microsoft. Is Reporting Services 2012 ready for production?
Thanks!

Hi mikea730,
Thanks for your psot.
Based on my research, I found a similar thread about this issue at Microsoft Contect site. For more information, please see:
http://connect.microsoft.com/SQLServer/feedback/details/721067/database-is-up-to-date-but-some-sites-are-not-completely-upgraded
It might be a known issue of SQL Server 2012. I would suggest opening a case with Microsoft Customer Support Services (CSS) (http://support.microsoft.com), so that a dedicated Support Professional can assist you
in a more efficient manner.
Regards,
Bin Long
Bin Long
TechNet Community Support

Sharepoint 2013 / Office 365 Document library item level permissions problem

Hello,
I'm looking for a solution to enable users to upload documents to a document library, the ability to view other documents uploaded to the same document library, but able to edit or delete those other documents.
With a list you can use Item-Level security in Advanced Settings but this is not available for Document libraries. I could use workflows to assign individual permissions to document, but the the library already contains over 2,000 documents and will continue
to expand so I don't like the idea of having that many individual permissions set.
Are there any 3rd party plug-ins or solutions to this issue?
Thanks,

Try below:
http://www.hersheytech.com/Blog/SharePoint/tabid/197/entryid/28/Default.aspx
As it turns out the, setting Item-Level Permissions in a library is fully supported with PowerShell!
The PowerShell commands for changing this are very simple:
$web = Get-SPWeb http://YourSite/
$list = $web.Lists[“Your Document Library Name”]
$list.ReadSecurity = 2
$list.Update()
$web.Dispose()
Note the 3rd line which is where you determine the value for this setting using the following values:
1 = “Read all items”
2 = “Read items that were created by the user”
If you wish to modify the values for Create and Edit access instead, replace .ReadSecurity with .WriteSecurity with
the following values:
1 = “Create and edit All items”
2 = “Create items and edit items that were created by the user”
4 = “None”
For example:
$web = Get-SPWeb http://YourSite/
$list = $web.Lists[“Your Document Library Name”]
$list.WriteSecurity = 2
$list.Update()
$web.Dispose()
Also check
http://sppermissions.codeplex.com/
If this helped you resolve your issue, please mark it Answered. You can reach me through http://freeit-support.com/

Alerts on a list with Item Level Permissions.

We have an IS Request list that people can email with their problems. We recently switched to Item Level Permissions where users can only see the requests that they created. IS has full control rights over the list and can see all the
items.
Our issue is that the alerts dont work in this type of list and SharePoint Designer alerts are hokey and less dependable.
Thoughts?
Devster

You can use the IAlertNotificationHandler interface to intercept the e-mail alert and to modify it.
Please check this thread below.
http://social.msdn.microsoft.com/Forums/sharepoint/en-US/29efe27c-26c2-407e-b771-4f77971238ef/alert-problem-permissions?forum=sharepointgeneralprevious
My Blog- http://www.sharepoint-journey.com|
If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

Always Get Edit Link When Item Level Permissions Set

We've enabled item-level permissions in a folder, and all users receive the "edit folder" button, regardless of whether we've given them "manage" access. Turning off item-level permissions removes the edit link.
Is this a known issue? Any workaround/solution?

That's just a "feature" of item level security, I don't think Oracle has any plans to fix it in 3.0.9X they probably have resolved the issuse in 9.0.2 ..... If you really need it gone you can click "Edit Defaults" when editing the page, right next to the portlet and uncheck the box that says show "Show Edit Link".. But then you just taken away the easy ability of editing the items through the portlet and you have to go back to the Content Area to update anything.
brad

Problem with setting Item level permissions lists

Hello!
I have SPS 2013 on-premised environment with AD authentication.
At some moment I've noticed that we have a problem with setting the item level permissions on any lists except the document libraries.
When I click the "shared with" button I see a popup form with a list of users who have an access to that list but there is no "invite people" link or "Advanced" link. Moreover, the "loading" ring rotates
instanly like some operation was'nt ended.
The same operation with documents in libraries works well.
I am be grateful for any help!

Hi Mischael,
From your description, my understanding is that there were no "invite people" or "Advanced" link when some users clicked "shared with" button in some lists.
This issue seems like about permissions. Please log on your site with site collection administrator or a user who has full control for the site, then go to a problematic list->List settings->Permissions for this list, check whether the list
has unique permissions. Then click "Check Permissions", check the permission level for the problematic users and then go to Site Settings->Site permissions->Permission levels, check whether the permission level contains "Manage permissions".
If not, add the permission into the permission level.
Thanks,
Wendy
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Item-level Permissions availabe in list advance setting not working.

Hi,
Recently i had an requirement of maintaining item level permission. My requirement was that whenever an item is created in list, it should be created with uniqure permission. I know how to do it by writing
custom code, but i don't want to do it with any code as client doesn't need any dll etc. After explroring i found that there is an option available in List's advance setting. Following are the steps i followed:-
Go to List settting.
Go to Advance setting.
In advance setting we have "Item-level Permissions" as one of option. This option have two
sub options.
For Read Accesss
select "Read items that were created by the user"
For Create and Edit access select "Create items and edit items that were created by the user"
Save the above settings.
Below is the screen shot for above mentioned setting:
Expected behaviour from above setting are:
Users can create new items
User can view and edit items only those item that are created by them.
But i found there is not change in item level permission. All users can View and
Edit items created by other users. May i am
misunderstanding above setting or there is Bug in sharepoint. Please help me if any body have any idea about it.
Regards,
Deepak
Deepak Kejriwal

Make sure that users have "Contribute" permission to the list, if the users have more permission at site level, then the list permission will be overridden by site permission.
Refer the following article for more info.
http://office.microsoft.com/en-us/windows-sharepoint-services-help/permission-levels-and-permissions-HA010100149.aspx
--Cheers

Reporting Services 2012 in SharePoint 2010 - SQL database edition?

We currently have a SharePoint 2010 farm, running on a SQL Server 2008 R2 Standard database. On one of the SharePoint 2010 servers, we have an instance of Reporting Services 2008 Enterprise running in SharePoint integrated mode. (We require Enterprise
for data-driven subscriptions)
We'd like to upgrade to Reporting Services 2012 for Data Alerts and a few other new features. However, I noticed something on
this blog stating that the SharePoint 2010 database server edition needs to match the Reporting Services edition. My concern is that I've not seen any official mention of this in Microsoft's documentation, and would like to avoid upgrading to Enterprise
for the SharePoint 2010 database if I can avoid it.
So, what I'd like to run is:
SharePoint 2010
SharePoint database: SQL Server 2008 R2 Standard
Reporting Services 2012 Enterprise
Reporting Services database: same as SharePoint database, so SQL Server 2008 R2 Standard
Is this possible? Or do I need to upgrade the SharePoint database to SQL Server 2008 R2 Enterprise?
Alternatively, could I install a separate database engine just for Reporting Services to host its databases (for example, SQL Server 2012 Enterprise), so I don't have to mess around with upgrading the SP database?

While you don't need to upgrade your SQL 2008 R2 to 2012, you will need to install an instance of SQL 2012 & SSRS 2012. They can be side-by-side and independent of each other. The following blog post provides steps to do so,
http://www.madronasg.com/blog/how-configure-sql-server-reporting-services-2012-use-sharepoint-2010#.UuEVd2Ao74Y
Dimitri Ayrapetov (MCSE: SharePoint)

Reporting Services 2012 mobile support

Hi,
Does anyone have info on mobile support for Reporting Services 2012. We've found
http://blogs.msdn.com/b/sqlrsteamblog/archive/2011/10/13/power-view-pass-and-mobile.aspx
which is a year old. It states the direction/strategy for "web based BI solutions" including SSRS for mobile devices (Android, iOS etc). Timeframe is set to 2nd half 2012. SQL Server 2012 SP1 is in CTP4 now and we can't find any info about better support
for mobile browsers and devices.
Has anyone found anything else or can share some experience? Our alternative is Telerik reporting which would be a new component for us which would add overhead to our project since the users and report writers know SSRS today.
Thanks!

Hi Mansos,
So far, my information abou the Mobile BI is gained from the Microsoft BI Team's MSDN
blog. There is a blog about Mobile BI posted on 3 April, 2012, you can refer to the following link:
Gartner BI Summit Day One Recap
If you need further information about the Mobile BI, I suggest that you contact the production group. Please see the "Contact US" section of the following site:
http://www.microsoft.com/en-us/bi/solutions.aspx
Regards,
Mike Yin
Mike Yin
TechNet Community Support

Workflow not triggering when changing Item-level Permissions in Sharepoint 2013 list

Scenario:
We have a custom list in Sharepoint 2013 that we use for Case Management. We have a workflow that triggers on a created item generated from an email. The user then gets a reply with a link to his own case.
I want the users only to be able to see their own cases and no one elses. When I change this under
Advanced Settings under List Settings and
Item-level Permissions and set them to Read items that were created by the user
and Create items and edit items that were created by the user
the workflow doesn´t trigger.
How can I resolve this? I've tried every possible out-of-the-box permissions but with no result. Help!
Thanks in advance!
// Browncreek

When you're testing , remember you cant trigger declarative workflow from the System Account - you need a general user account for auto-trigger workflows. Good luck!
Chris McNulty MCSE/MCTS/MSA/MVTSP | blog http://www.chrismcnulty.net/blog | twitter @cmcnulty2000 Microsoft Community Contributor Award 2011
Hi, I have the same problem. Except that I am not using an email to create a new item. The item is created by members of a SharePoint group that have Contribute access to the list. When use the same settings i.e.
Read items that were created by the user and Create items and edit items that were created by the user,
the workflow does not trigger. If I set it back to Real all items and Create
and Edit all items, it triggers the workflow.
Please help me resolve as I have rolled this out to pilot users and am having this trouble.
Thanks,
Vishal

Embed an iframe/webpage in Reporting Services 2012

Hi all,
is it possible to embed an iframe or webpage in Reporting Services 2012 (such as CustomReportItem, Textbox with HTML content,...)
Thanks in advance

Hi Tablix,
Based on my research, this feature is not supported in current release of Reporting Services. If you have any concern about this, please submit a feedback at
https://connect.microsoft.com/SQLServer/Feedback. Connect site is a connection point between you and Microsoft, and ultimately the larger community. Your feedback enables Microsoft to make software
and services the best that they can be, and you can learn about and contribute to exciting projects.
Thank you for your understanding.
Regards,
Katherine Xiong
Katherine Xiong
TechNet Community Support

IIS Recycle times for Service Application App pool / Reporting Services 2012 memory

Hello,
On our SharePoint application servers we run the Reporting Services 2012 in SharePoint integrated mode. For the Reporting Services SharePoint sets up a own App Pool.
Now we found, that this App Pool for Reporting Services takes all the memory of the server. Usually the SharePoint Web Application App Pool are recycled at night. The Service Application App Pools are not ? I'm confused.
Of course, if an App Pool does not recylce it takes all memory it gets.
>> But why is the recycling option in IIS not set for SharePoint Service Application pools? Does any know if we can just set recycle times, like for the Web Application app pools?
Thanks in advance community.
Benjamin

You may want to consider limiting the amount of memory to be allocated to SSRS by editing C:\Program Files\Common Files\microsoft shared\Web Server Extensions\15\WebServices\Reporting\rsreportserver.config and changing the value of <MemoryThreshold>.
This value is in percent. SSRS evaluates the amount of memory on service startup and will allocate up to this percentage of memory to SSRS.
You also may want to consider increasing the amount of memory available on that SharePoint server.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Item Level permissions document library

In SharePoint 2010 you could apply item level permissions to document libraries via PowerShell with
$web= Get-SPOSite "sitename"
$list = $web.Lists[“Listname”]
$list.ReadSecurity = 2
$list.Update()
$web.Dispose()
Is there a way to apply this to SharePoint online 2013? it doesn't seem to work.

Hi SpNerd,
For SharePoint 2013 Online, there is not a comdlet that is used to get a site. So, it seems that there is not a way to change Item-level permissions via PowerShell for SharePoint Online.
Windows PowerShell for SharePoint Online cmdlets
http://technet.microsoft.com/en-us/library/fp161364(v=office.15).aspx
As a workaround, you can change Item-level permissions via SharePoint Online UI as List Settings->Advanced Settings->Item-level Permissions.
I hope this helps.
Thanks,
Wendy
Wendy Li
TechNet Community Support

Reporting Services 2012 Item-level permissions issue

Similar Messages

Maybe you are looking for