Security scopes and reporting

Question

Hello,
I'm trying to plan a ConfigMgr 2012 site that will be used by multiple groups who do not interact with one another. I'd like to divide this site into managerial groups using security scopes and RBAC, ideally so members of one group cannot view or manage
collections, applications, and updates belonging to the other group. In a lab I've created groups A and B with access to security scopes A and B, with access to collections A and B. So far this has worked out nicely in almost every area except for reporting.
As a full administrator I can view and run reports just fine; however, users A and B (who are not full administrators, but are members of the "ConfigMgr Report Users" role in my SSRS instance) cannot view any reports from the console. Additionally when I
click Create Report under the context of user A or B, I get the error "Could not find an installed Reporting Services point. Verify the site role is installed and accessible." To me it sounds like there is a permissions issue somewhere in SSRS or ConfigMgr
but I haven't figured out what yet.
Aside from that, I would like so members of group A cannot report on objects that belong to security scope B. To my knowledge this won't be inherently possible because the SSRS security model is different from the ConfigMgr RBAC model. Has anybody been able
to come up with any workarounds to scope down the reporting capabilities of limited ConfigMgr users? Any advice or direction in this realm would be greatly appreciated.
Thanks,
Nick

Answer 1

Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
This has been solve in CM12 R2, you can see it in the blog/video.
http://www.enhansoft.com/blog/role-based-administration-rba-reporting-feature-in-sccm-2012-r2
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ