Microsoft® SQL Server 2012 Unleashed

Securing Reports

As we’ve seen in previous examples, SSRS has a built-in, role-based security system. All operations done on the server are subject to permissions. Access to SSRS is controlled through security roles and role assignments.

A security role is a collection of permissions—for example, the permission to create reports in a folder, the permission to view a certain report or a folder.

A role assignment is a set of permissions represented by the role given to a principal on a certain report or folder in the Report Server catalog. For example, the permissions on a folder called Data Sources contain the local administrators group with all permissions contained in the Content Manager role.

Permissions on folders are inherited to all items ...