The permissions granted to user 'domain\user' are insufficient for performing this operation. (rsAccessDenied)

Brandon Ho 376 Reputation points
2021-06-27T14:30:35.17+00:00

Hi,
End user is getting The permissions granted to user 'Domain\User' are insufficient for performing this operation. (rsAccessDenied) error when they drill down from the main report (YTD Spending). The main report is a matrix report which collects static information of each department spending by cost center. When user click on the static information on a cell, it will drill down to a subreport to display more details. User has been granted to have Browser and Content Manager permission in the folder and data source folder. Report is running on a specific account which has permission to access SQL database. User has no issue running the main and the subreport directly from the Home\Finance folder. The error only happen when they drill down to the subreport. SSRS and SQL is running on 2019 Enterprise edition.

Below is the exception error from SSRS log:

library!ReportServer_0-1!24c8!06/27/2021-06:21:37:: i INFO: Call to GetPropertiesAction(/Finance/YTD Spending, PathBased). User: Domain\User.
library!ReportServer_0-1!28f4!06/27/2021-06:21:38:: i INFO: Entering StreamRequestHandler.ExecuteCommand - Command = StyleSheet
library!ReportServer_0-1!28f4!06/27/2021-06:21:38:: i INFO: Exiting StreamRequestHandler.ExecuteCommand - Command = StyleSheet (success)
library!ReportServer_0-1!28f4!06/27/2021-06:21:39:: i INFO: Call to GetItemTypeAction(/Finance/YTD Spending). User: Domain\User.
library!ReportServer_0-1!28f4!06/27/2021-06:21:39:: i INFO: Call to GetPropertiesAction(/Finance/YTD Spending, PathBased). User: Domain\User.
library!ReportServer_0-1!28f4!06/27/2021-06:21:39:: i INFO: RenderForNewSession('/Finance/YTD Spending')
dataextension!ReportServer_0-1!28f4!06/27/2021-06:21:39:: i INFO: Opening SqlConnection with ClientConnectionId 3741767e941c4c409fa29d73b8005037
library!ReportServer_0-1!28f4!06/27/2021-06:21:41:: i INFO: Using folder C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\ReportServer\RSTempFiles for temporary files.
library!ReportServer_0-1!1dec!06/27/2021-06:21:47:: i INFO: Call to GetItemTypeAction(/Finance/YTD Spending). User: Domain\User.
library!ReportServer_0-1!1dec!06/27/2021-06:21:47:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: , Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'Domain\User' are insufficient for performing this operation.;
library!ReportServer_0-1!1dec!06/27/2021-06:21:47:: i INFO: Call to GetPropertiesAction(/Finance/YTD Spending, PathBased). User: Domain\User.
l

I have created a test user and grant Browser, Content Manager, My Reports, Report Builder permissions but still unable to drill down. It is getting the same error. Based on Internet searching, I need to grant the user Administrator rights to the site which they should not be as a user.

What permission settings should be set to allow user drill down to the subreport from a matrix report? Any suggestion would be appreciated.

Thanks,
Brian.

SQL Server Reporting Services
SQL Server Reporting Services
A SQL Server technology that supports the creation, management, and delivery of both traditional, paper-oriented reports and interactive, web-based reports.
2,878 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Raper, Gregory 21 Reputation points
    2022-05-17T20:24:09.607+00:00

    It is ridiculous that the documented workaround is to use Internet Explorer. IE isn't even going to be available later this year. I do not have access to use it as Admin due to company restrictions.

    Can you please provide a solution for obtaining Web Portal access to a Reporting Server using only the Microsoft Edge browser?

    4 people found this answer helpful.
    0 comments No comments

  2. Joyzhao-MSFT 15,571 Reputation points
    2021-06-28T06:50:18.81+00:00

    Hi @Brandon Ho ,

    The permissions granted to user 'Domain\User' are insufficient for performing this operation. (rsAccessDenied)

    The reason for this error is:

    1. Role assignment. The necessary permissions (folder permissions and site permissions) are missing.When configuring permissions, please open the IE browser with "Run as Administrator".
    2. Caused by the local management of the report server. For more information, please refer to:Configure a Native Mode Report Server for Local Administration (SSRS)

    Please make sure that the user has sufficient folder permissions and site permissions, and set "Trusted Sites" in the browser, and finally restart the report server.
    Best Regards,
    Joy


    If the answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.