Store Credentials for a Data Source

  • Article

You can configure stored credentials that a Reporting Services report server uses to access external data for a report. Stored credentials are used if the report runs unattended, for example a Reporting Services subscription that publishes a report as an e-mail. The report server retrieves and uses the credentials when report processing is scheduled or triggered. This topic walks you through configuring stored credentials for both Native mode and SharePoint mode report servers.

Applies to: Reporting Services Native mode | Reporting Services SharePoint mode

In this topic:

  • Configure stored credentials for a report-specific data source (Native mode)

  • Configure stored credentials for a report-specific data source, (SharePoint mode)

  • Configure stored credentials for a shared data source (Native mode)

  • Configure stored credentials for a shared data source (SharePoint mode)

Security policy requirements for stored credentials

set key button from secure store service It is required that the account you use for stored credentials, is configured for one of the following security policies on the report server. It is recommended you select the policy with the minimum level of permissions you require for your environment.

  1. Allow log on locally. For more information, see Allow log on locally.

  2. Log on as a batch job. For more information, see Log on as a batch job.

  3. For general information on policies, see Edit security settings on a Group Policy object.

Configure stored credentials for a report-specific data source (Native mode)

  1. In Native mode Report Manager, browse to the folder that contains the report. Click the item context menu ssrs_report_manager_item_context_menu.

  2. Click Manage and then click Data Sources.

  3. Select A custom data source.

  4. In the Data Source Type list, select the data processing extension that is used to process data from the data source.

  5. For Connection String, specify the connection string that the report server uses to connect to the data source. The following example illustrates a connection string used to connect to the SQL Server  AdventureWorks2012 database:

    data source=<servername>;initial catalog=AdventureWorks2012

  6. For Connect Using, select Credentials stored securely in the report server.

  7. Type a user name and password.

    • If the account is a Windows domain user account, specify it in this format: <domain>\<account>, and then select Use as Windows credentials when connecting to the data source.

    • If the user name and password are database credentials, do not select Use as Windows credentials when connecting to the data source. If the database server supports impersonation or delegation, you can select Impersonate the authenticated user after a connection has been made to the data source.

  8. Click Apply.

    Arrow icon used with Back to Top link Top

Configure stored credentials for a report-specific data source (SharePoint mode)

  1. Browse to the document library that contains the report and then click the open menu ssrs_sharepoint_item_context_menu.

  2. Click second open menu ssrs_sharepoint_item_context_menu and then click Manage Data Sources.

  3. Click the name of the Custom data source you want to configure with stored credentials.

  4. In the Data Source Type list, select the data processing extension that is used to process data from the data source.

  5. For Connection String, specify the connection string that the report server uses to connect to the data source. The following example illustrates a connection string used to connect to the SQL Server  AdventureWorks2012 database:

    data source=<servername>;initial catalog=AdventureWorks2012

  6. For Credentials, select Stored Credentials.

  7. Type a user name and password.

    • If the account is a Windows domain user account, specify it in this format: <domain>\<account>, and then select Use as Windows credentials when connecting to the data source.

    • If the user name and password are database credentials, do not select Use as Windows credentials. If the database server supports impersonation or delegation, you can select Set execution context to this account.

  8. Click ok.

    Arrow icon used with Back to Top link Top

Configure stored credentials for a shared data source (Native mode)

  1. In Native mode Report Manager, browse to the shared data source item. Shared data source icon

  2. Click the context menu ssrs_report_manager_item_context_menu and then click Manage.

  3. In the Data Source Type list, specify the data processing extension that is used to process data from the data source.

  4. For Connection String, specify the connection string that the report server uses to connect to the data source. Microsoft recommends that you do not specify credentials in the connection string.

    The following example illustrates a connection string used to connect to the local SQL Server  AdventureWorks2012 database:

    data source=<localservername>; initial catalog=AdventureWorks2012

  5. Type a user name and password.

    • If the account is a Windows domain user account, specify it in this format: <domain>\<account>, and then select Use as Windows credentials when connecting to the data source.

    • If the user name and password are database credentials, do not select Use as Windows credentials when connecting to the data source. If the database server supports impersonation or delegation, you can select Impersonate the authenticated user after a connection has been made to the data source.

  6. Click Apply.

    Arrow icon used with Back to Top link Top

Configure stored credentials for a shared data source (SharePoint mode)

  1. In the document library, browse to the shared data source item.Shared data source icon

  2. Click the context menu ssrs_sharepoint_item_context_menu and then click the second context menu ssrs_sharepoint_item_context_menu.

  3. Click Edit Data Source Definition.

  4. In the Data Source Type list, specify the data processing extension that is used to process data from the data source.

  5. For Connection String, specify the connection string that the report server uses to connect to the data source. Microsoft recommends that you do not specify credentials in the connection string.

    The following example illustrates a connection string used to connect to the local SQL Server  AdventureWorks2012 database:

    data source=<localservername>; initial catalog=AdventureWorks2012

  6. Type a user name and password.

    • If the account is a Windows domain user account, specify it in this format: <domain>\<account>, and then select Use as Windows credentials.

    • If the user name and password are database credentials, do not select Use as Windows credentials. If the database server supports impersonation or delegation, you can select Set Execution context to this account.

  7. Click Ok.

    Arrow icon used with Back to Top link Top

See Also

Tasks

Configure Data Source Properties for a Report (Report Manager)

Create, Delete, or Modify a Shared Data Source (Report Manager)

Reference

Data Sources Properties Page (Report Manager)

New Data Source Page (Report Manager)

Concepts

Specify Credential and Connection Information for Report Data Sources