Forum Discussion

abrownfl's avatar
abrownfl
Frequent Visitor
1 year ago

Permissions/Roles

Hello, does anyone know if there is a way to assign roles and permissions on Power BI Report Server so a login can traverse all folders and download any report definition across the entire report server even if parent/subfolder permission inheritence is broken? 

 

 

4 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi, abrownfl 

    Assign roles and permissions on Power BI Report Server so that a signed-in user can traverse all folders and download any report definitions, even if parent/child folder permission inheritance is broken. 

    The Content Manager role has permissions to manage folders, reports, and other resources. Users in this role can browse all folders and subfolders, even if inheritance is broken.
    If the default role doesn't meet your needs, you can create a custom role with the necessary permissions. You'll need to go into the site settings for Power BI Report Server. Select Security, and then select New Role Assignment. Add users or groups and assign them custom roles with permissions to view, manage, and download reports. Then use SQL Server Reporting
    Power BI Report Server uses the same security model as SSRS. Permissions can be managed at the folder level to ensure that users or groups have the necessary access.

    Ensure that the appropriate permissions are set for the user or group at each folder level. If the inheritance is broken, you may need to manually set permissions. You can check the following link:

    Predefined roles in Reporting Services - SQL Server Reporting Services (SSRS) | Microsoft Learn

     

    How to Get Your Question Answered Quickly

    Best Regards

    Yongkang Hua

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

    • abrownfl's avatar
      abrownfl
      Frequent Visitor

      Thanks v-yohua-sft ,  How will a custom role help?  Content Manager is already assigned at the parent folder and to my knowledge, even a custom role (with all permissions chosen) still only has the same permissions as Content Manager, or am I wrong there?

       

      HOME

          Folder 1             Login is Content Manager

              SubFolder1    Login is NOT content manager and Inheritence is broken

                      Report   Login CANNOT download this report

         

  • If the inheritance is broken, you need a server-level role, not a folder-level one. But these roles are only for server administration. I haven't tried this with the "System User" role and broken inheritance, but you can try.

    If it doesn't work, you should follow Yongkang Hua's advice.
    Greetings,

    Christoph

    • abrownfl's avatar
      abrownfl
      Frequent Visitor

      Thanks, I tested system user and I still get a 403 forbidden error.