topic Re: Permission issue with custom security extension (Form Authentication) in Report Server

Permission issue with custom security extension (Form Authentication)

malikirfan28 — Mon, 08 Jan 2018 10:38:00 GMT

Hello,

I have enabled custom security authentication (form authenticatioin) in on-premises PBIRS and it is working fine. I can successfully register new user and then can login with it. However as soon as I login, a message is displayed:

You are not allowed to view this folder. Contact your administrator to obtain the necessary permissions.

I know, I have to grant permission to this new user in PBIRS (Site Settings) but I am unable to login with Windows Administrator (Builten\Administrator OR MachineName\Administrator) account as PBIRS is configured with custom security. So how can I login with Administrator here?

If I remove custome security settings and then login with Windows (Administrator) account then my custom users can not be found when trying to add "User or group" in site settings. So please need some expert guidance to resolve this permission issue.

Thank you.

Re: Permission issue with custom security extension (Form Authentication)

v-yulgu-msft — Wed, 10 Jan 2018 08:13:51 GMT

Hi malikirfan28,

Which account is the administrator role with forms authentication? You said you can successfully register new user and then can login with it, did you assign an admin role to it?

Please have a look at this similar thread

Custom Form Authentication in SSRS 2012

Best regards,

Yuliana Gu

Re: Permission issue with custom security extension (Form Authentication)

malikirfan28 — Wed, 10 Jan 2018 12:01:34 GMT

Dear v-yulgu-msft,

Thank you for your message. Part of my problem has been resolved and I have assigned one user under Extension -> Security -> AdminConfiguration in RsReportServer.Config.

However we have multiple users and each user is supposed to be entitled to (view only) his own dashboards/reports and all dashboard should not be visible to him. So Under Site Settings -> Security, I have assigned "System User" role to the respective User. This user can now login into the system but no dashboard is visible to him.

So how can we assign only few dashboard's VIEW ONLY entitlements to this user (Not complete folder)?

Thank you.