Microsoft® SQL Server 2005 Reporting Services

Chapter 18. Securing Report Server Items

In This Chapter

• Reporting Services Security Model

• Defining Custom Roles

Because SSRS is a .NET application, many of the existing .NET security paradigms come into play when securing access to the Report Server. From the end user’s viewpoint, SSRS uses role-based authorization built on top of Windows authentication. If using a custom authentication mechanism, the underlying principals are the same. It is simply up to the authorization mechanism to define valid users and roles (called principals).

Reporting Services Security Model

Role-based authorization is not a new concept. It is a proven mechanism that is implemented in a variety of ways. One of the most common, everyday items that uses role-based ...