The permissions granted to user 'domain\user' are insufficient for performing this operation. (rsAccessDenied)

Question

The permissions granted to user 'domain\user' are insufficient for performing this operation. (rsAccessDenied)

Brandon Ho 361

Hi,
End user is getting The permissions granted to user 'Domain\User' are insufficient for performing this operation. (rsAccessDenied) error when they drill down from the main report (YTD Spending). The main report is a matrix report which collects static information of each department spending by cost center. When user click on the static information on a cell, it will drill down to a subreport to display more details. User has been granted to have Browser and Content Manager permission in the folder and data source folder. Report is running on a specific account which has permission to access SQL database. User has no issue running the main and the subreport directly from the Home\Finance folder. The error only happen when they drill down to the subreport. SSRS and SQL is running on 2019 Enterprise edition.

Below is the exception error from SSRS log:

library!ReportServer_0-1!24c8!06/27/2021-06:21:37:: i INFO: Call to GetPropertiesAction(/Finance/YTD Spending, PathBased). User: Domain\User.
library!ReportServer_0-1!28f4!06/27/2021-06:21:38:: i INFO: Entering StreamRequestHandler.ExecuteCommand - Command = StyleSheet
library!ReportServer_0-1!28f4!06/27/2021-06:21:38:: i INFO: Exiting StreamRequestHandler.ExecuteCommand - Command = StyleSheet (success)
library!ReportServer_0-1!28f4!06/27/2021-06:21:39:: i INFO: Call to GetItemTypeAction(/Finance/YTD Spending). User: Domain\User.
library!ReportServer_0-1!28f4!06/27/2021-06:21:39:: i INFO: Call to GetPropertiesAction(/Finance/YTD Spending, PathBased). User: Domain\User.
library!ReportServer_0-1!28f4!06/27/2021-06:21:39:: i INFO: RenderForNewSession('/Finance/YTD Spending')
dataextension!ReportServer_0-1!28f4!06/27/2021-06:21:39:: i INFO: Opening SqlConnection with ClientConnectionId 3741767e941c4c409fa29d73b8005037
library!ReportServer_0-1!28f4!06/27/2021-06:21:41:: i INFO: Using folder C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\ReportServer\RSTempFiles for temporary files.
library!ReportServer_0-1!1dec!06/27/2021-06:21:47:: i INFO: Call to GetItemTypeAction(/Finance/YTD Spending). User: Domain\User.
library!ReportServer_0-1!1dec!06/27/2021-06:21:47:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: , Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'Domain\User' are insufficient for performing this operation.;
library!ReportServer_0-1!1dec!06/27/2021-06:21:47:: i INFO: Call to GetPropertiesAction(/Finance/YTD Spending, PathBased). User: Domain\User.
l

I have created a test user and grant Browser, Content Manager, My Reports, Report Builder permissions but still unable to drill down. It is getting the same error. Based on Internet searching, I need to grant the user Administrator rights to the site which they should not be as a user.

What permission settings should be set to allow user drill down to the subreport from a matrix report? Any suggestion would be appreciated.

Thanks,
Brian.

Answer 1

Gregory R 16

It is ridiculous that the documented workaround is to use Internet Explorer. IE isn't even going to be available later this year. I do not have access to use it as Admin due to company restrictions.

Can you please provide a solution for obtaining Web Portal access to a Reporting Server using only the Microsoft Edge browser?

Answer 2

Joyzhao-MSFT 15,381 Microsoft Employee

Hi @Brandon Ho ,

The permissions granted to user 'Domain\User' are insufficient for performing this operation. (rsAccessDenied)

The reason for this error is:

Role assignment. The necessary permissions (folder permissions and site permissions) are missing.When configuring permissions, please open the IE browser with "Run as Administrator".
Caused by the local management of the report server. For more information, please refer to：Configure a Native Mode Report Server for Local Administration (SSRS)

Please make sure that the user has sufficient folder permissions and site permissions, and set "Trusted Sites" in the browser, and finally restart the report server.
Best Regards,
Joy

If the answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Brandon Ho 361 Reputation points

2021-06-29T14:59:36.167+00:00

Hi Joy,

Thanks for your help. It turns out the issue is not related to permission of the user. It was related to the link reports. Both summary and detail reports are resided on a different folder which this user should not have access to. We created the link report of these two reports on the Finance folder for user to access. The user has no issue accessing the summary report but the detail report which is a drill down from the summary report. Once I moved both reports to the Finance folder instead of linking reports, user can drill down to the detail report within the folder. Not sure what permission should be set for user to access the Summary link report then drill down to another Detail link report from a different folder.

Brandon.
Joyzhao-MSFT 15,381 Reputation points Microsoft Employee

2021-06-30T07:07:39.277+00:00

You mentioned that the main reports and sub-reports in the "Finance" folder are linked reports obtained by performing the "Create linked Report" operation in "Summary Report" and "Detail Report". I can understand that the subreports in your main report actually point to the "Detailed Reports" instead of the subreports in the "financial" folder. If you want to drill down to the subreport, the permissions you should really configure for users are " the "Browser" role of the "Detail Report". The subreport link in your main report is essentially the subreport "Detail Report" created on the "Summary Report", so even if you add any permissions for the subreport to the user, it will not help.
Brandon Ho 361 Reputation points

2021-06-30T15:21:38.753+00:00

Yes, you are correct. In my case, I create the Summary & Detail report reside in the "Main Report" folder then create link report and place them in the "Finance Report" folder. Accounting user can browse the link Summary report and yet has problem drill down to the link Detail report from the Summary report within the "Finance Report" folder. To allow drill down to the link Detail report, I will need to grant user browse permission to the "Main Report" folder which contains reports for other departments. To avoid letting user accessing "Main Report" folder directly, I have to delete the link reports in the "Finance Report" folder then move both Summary & Detail reports into the "Finance Report" folder for direct access. This resolve the permission issue when user drill down to the Detail report from the Summary report in the "Finance Report" folder.

Thanks.
Joyzhao-MSFT 15,381 Reputation points Microsoft Employee

2021-07-01T05:45:57.563+00:00

Thanks for your feedback. If you have any questions, you can always feel free to let me know.
If the answer is helpful, please click "Accept Answer" and upvote it.
Ján Nemeček 1 Reputation point

2022-12-13T14:39:35.193+00:00

The reason is, that Microsoft can't produce working solution. I have local default installation of SQL Server and SSRS Service and still got this kind of error. I am local admin and have access to everything in my system. I added my account to SSRS admins and other stupid stuff that i found on the internet, and it still not working.
Time to look for something better like Telerik. Good bye.

The permissions granted to user 'domain\user' are insufficient for performing this operation. (rsAccessDenied)

2 answers

Activity