Permissions/Roles

[abrownfl]

Hello, does anyone know if there is a way to assign roles and permissions on Power BI Report Server so a login can traverse all folders and download any report definition across the entire report server even if parent/subfolder permission inheritence is broken? 

[ChrisMuthmann]

If the inheritance is broken, you need a server-level role, not a folder-level one. But these roles are only for server administration. I haven't tried this with the "System User" role and broken inheritance, but you can try.

If it doesn't work, you should follow Yongkang Hua's advice.
Greetings,

Christoph

[abrownfl]

Thanks, I tested system user and I still get a 403 forbidden error.

[Anonymous]

Hi, @abrownfl 

Assign roles and permissions on Power BI Report Server so that a signed-in user can traverse all folders and download any report definitions, even if parent/child folder permission inheritance is broken. 

The Content Manager role has permissions to manage folders, reports, and other resources. Users in this role can browse all folders and subfolders, even if inheritance is broken.
If the default role doesn't meet your needs, you can create a custom role with the necessary permissions. You'll need to go into the site settings for Power BI Report Server. Select Security, and then select New Role Assignment. Add users or groups and assign them custom roles with permissions to view, manage, and download reports. Then use SQL Server Reporting
Power BI Report Server uses the same security model as SSRS. Permissions can be managed at the folder level to ensure that users or groups have the necessary access.

Ensure that the appropriate permissions are set for the user or group at each folder level. If the inheritance is broken, you may need to manually set permissions. You can check the following link:

Predefined roles in Reporting Services - SQL Server Reporting Services (SSRS) | Microsoft Learn

How to Get Your Question Answered Quickly

Best Regards

Yongkang Hua

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[abrownfl]

Thanks v-yohua-sft ,  How will a custom role help?  Content Manager is already assigned at the parent folder and to my knowledge, even a custom role (with all permissions chosen) still only has the same permissions as Content Manager, or am I wrong there?

HOME

    Folder 1             Login is Content Manager

        SubFolder1    Login is NOT content manager and Inheritence is broken

                Report   Login CANNOT download this report