SSRS 2019 "The permissions granted to user '' are insufficient for performing this operation"

Question

Trying to add/run a subscription to a existing SSRS 2019 report I'm getting the error below in the SSRS log file where the ONLY thing I changed was my actual login to Domain\username. `

library!WindowsService_0!2154!01/26/2024-14:28:03:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.WindowsAuthz5ApiException: , Microsoft.ReportingServices.Diagnostics.Utilities.WindowsAuthz5ApiException: Windows returned a ERROR_ACCESS_DENIED error when Reporting Services attempted to call the Windows Authz APIs. If this issue persists the Reporting Services account may not possess permission to perform authentication checks. Check the Windows Authz documentation for more information and details on diagnosing issues. Authz method: AuthzInitializeContextFromSid, Error code: 5, UserName: Domain\username.;

library!WindowsService_0!2154!01/26/2024-14:28:03:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.WindowsAuthz5ApiException: , Microsoft.ReportingServices.Diagnostics.Utilities.WindowsAuthz5ApiException: Windows returned a ERROR_ACCESS_DENIED error when Reporting Services attempted to call the Windows Authz APIs. If this issue persists the Reporting Services account may not possess permission to perform authentication checks. Check the Windows Authz documentation for more information and details on diagnosing issues. Authz method: AuthzInitializeContextFromSid, Error code: 5, UserName: Domain\username.; library!WindowsService_0!2154!01/26/2024-14:28:03:: w WARN: AccessCheck: Win32 error:6

library!WindowsService_0!2154!01/26/2024-14:28:03:: i INFO: Initializing EnableExecutionLogging to 'True' as specified in Server system properties. emailextension!WindowsService_0!2154!01/26/2024-14:28:04:: e ERROR: Error sending email. Exception: Microsoft.ReportingServices.Diagnostics.Utilities.RSException: The permissions granted to user '' are insufficient for performing this operation. ---> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user '' are insufficient for performing this operation.. Additional Information:

notification!WindowsService_0!2154!01/26/2024-14:28:06:: e ERROR: Error occurred processing subscription 874b4acb-3975-4501-b7b6-8ebba73a67d2: Failure sending mail: The permissions granted to user '' are insufficient for performing this operation.Mail will not be resent.

notification!WindowsService_0!2154!01/26/2024-14:28:06:: i INFO: Notification c61e2bab-4e48-405a-ab64-c5691901d385 completed. Success: False, Status: Failure sending mail: The permissions granted to user '' are insufficient for performing this operation.Mail will not be resent., DeliveryExtension: Report Server Email, Report: ...

`
however.....nothing that I found here https://learn.microsoft.com/en-us/troubleshoot/sql/reporting-services/call-authzinitializecontextfromsid-api-fails makes sense as:
My AD domain login is system administrator+system user at site settings AND is sysadmin in SQL Server running the ReportServer database AND local admin where both SQL 2019 and SSRS 2019 are installed on a Windows 2022 Standard Server ; Has all Content Manager, Browser, Publisher, etc...at the report folder level; The SSRS is running under a Domain\login account as noted at Method 2 above link.

What else is needed in SSRS 2019 aside ALL the above for a administrator to be able to create/run a successful Subscription?

Answer 1

Hi @Nenea Nelu,

The Reporting Services service account controls subscription delivery and interacts with the account used for file share subscriptions. Windows security features restrict combinations of 1) the Reporting Services service account and 2) the account used for file share accounts. For example, if a built-in operating system account is used for the file share account, then the Reporting Services service account must be another service account with impersonation permissions. If an explicit file share account and password is configured, then the file share account requires the right to logon (via Allow log on locally) on to the computer running the Reporting Services service.

Note: You may need to re-start SSRS server.

Work with subscriptions (web portal)

Regards，

Zoe Hui

---

If the answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Thank you @ZoeHui-MSFT All our subscriptions are Email subscriptions where the report is usually sent as link + attached excel where they are not too big. For large reports only link is sent but the problem is that the subscription doesn't work and fails with above errors in the logs where there's no login specified which is really weird. The SSRS version is: "Microsoft SQL Server Reporting Services Version 15.0.1102.1084"

Answer 3

Hi @Nenea Nelu You can adjust attachment file size limit to allow sending bigger files. Check this link Report and snapshot size limits
Regards Javier