403 Forbidden Error When Running SSRS Reports from Azure Web App within VNet

Chris Boyce 20 Reputation points


I’m facing an issue with accessing SSRS reports hosted on a virtual machine from an Azure Web App . The database on a separate managed instance the SSRS is on a VM with access done via URL for the web app.

Here’s the situation: The reports execute correctly using SQL credentials ( Managed Instance ) directly from the SSRS web page on the virtual machine.

The problem arises when trying to access the SSRS reports using the Azure Web App with Domain user credentials (VM) via URL, we encounter the following error:

System.Net.WebException: The remote server returned an error: (403) Forbidden.

Currently we are using an admin level username and password to connect the web app to the SSRS VM to access the reports for the application connected to the SSRS. (As note Were not applying any domain or machine name as part of the credentials)

The Web app has access to the VM reports using private DNS and NSG ( we are using port 80 as were not at the point of using the SSL yet )

Were not sure why the user does have permission to access the report(s) when were using an admin level user account to create the connection. Any insights or suggestions would be greatly appreciated.

Checked ports,permissions,connections

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,370 questions
Microsoft Technologies based on the .NET software framework.
3,524 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,151 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. hossein jalilian 4,540 Reputation points

    Thanks for posting your question in the Microsoft Q&A forum.

    Here are some potential solutions and suggestions based on the information provided:

    • Ensure that the SSRS instance on the VM is configured to allow access from the Azure Web App.
    • Instead of using domain user credentials, consider using a managed identity or service principal to authenticate the Azure Web App to the SSRS instance on the VM. This can help avoid permission issues and provide a more secure authentication method.
    • Verify that the Network Security Group (NSG) rules on the VM and the Azure Web App are configured correctly to allow the necessary inbound and outbound traffic for the SSRS connection.

    Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful

    1 person found this answer helpful.