Access to SQL Server Reporting Services (SSRS) is granted by assigning the user or group to appropriate SSRS roles. A member of the local Administrators group on the report server must perform these steps.
For a native mode SSRS deployment:
- Open the SSRS web portal (Report Manager) on the report server.
- In the upper-right corner, select the gear icon and choose Site settings.
- Go to the Security page.
- Select Add group or user.
- In Group or user, enter the Windows account or group in the form:
DOMAIN\UserName or DOMAIN\GroupName
- Select the appropriate system role, typically:
- System User for standard access to the site, and/or
- System Administrator for administrative tasks.
- Select OK.
- To grant access to reports and folders, go back to the Home folder in the web portal and assign item-level roles (for example Browser, Report Builder, Publisher, Content Manager) to the same user or group. Role assignments on the Home folder are inherited by child folders and reports.
Internally, SSRS uses role-based authorization. Role assignments are stored in the report server database and can be managed via the web portal for user/group assignment and via SQL Server Management Studio if custom roles are needed.
If SSRS is integrated with SharePoint (up to SQL Server 2016 only), access is controlled through SharePoint permissions instead of the SSRS web portal. In that case, grant the user appropriate SharePoint permission levels (for example, those including View Items, Create Alert, or Manage Alerts depending on the scenario).
References: