Configure Report Builder access

Applies to: SQL Server 2016 (13.x) Reporting Services and later  Power BI Report Server

Microsoft Report Builder is a reporting tool that can be used with a SQL Server Reporting Services report server configured for either native mode or SharePoint integration mode.

Access to Report Builder depends on the following factors:

  • Role assignments or permissions that make Report Builder available to individual users or groups.

  • Authentication settings that determine whether user credentials can be passed through to the report server.

Prerequisites

The client computer must have Microsoft .NET Framework 4.6.1 or higher installed.

Enable and disable Report Builder

Downloading Report Builder via the portal is enabled by default. Report server administrators have the option of disabling the Report Builder download by setting the report server system property ShowDownloadMenu to false. Setting this property disables Report Builder, Mobile Report Publisher, Power BI Desktop, and Power BI Mobile downloads for that report server.

To set report server system properties, you can use Management Studio or script:

Role assignments granting Report Builder access on a native mode report server

On a native mode report server, create user role assignments that include tasks for using Report Builder. You must be a Content Manager and System Administrator to create or modify role definitions and role assignments on items and at the site level.

The following instructions assume that you're using predefined roles. If you modified the role definitions, check the roles to verify they contain the necessary tasks. For more information about creating role assignments, see Grant user access to a report server.

After you create the role assignments, users have permission to do the following tasks:

  • Users assigned to the System User and Browser roles can view published Report Builder reports on a report server, without having to launch Report Builder.

  • Users assigned to the System User and Report Builder roles can generate models, start Report Builder and create reports, and save reports to the report server.

  • Users assigned to the System User and Publisher roles can publish models from Model Designer to the report server. Models are used as data sources in Report Builder.

  • Users assigned to the System Administrator and Content Manager roles have full permissions to create, view, and manage Report Builder reports.

Verify required tasks are in the role definitions

  1. Start Management Studio and connect to the report server.

  2. Open the Security folder.

  3. Open the System Roles folder.

  4. Right-click System Administrator, and select Properties.

  5. Choose Execute report definitions and select OK.

  6. Right-click System User, and select Properties.

  7. Choose Execute report definitions and select OK.

  8. Open the Roles folder.

  9. Right-click Browser, and select Properties.

  10. Choose View models and select OK.

  11. Right-click Content Manager, and select Properties.

  12. Choose View models, Manage models, Consume reports, and select OK.

  13. Right-click Publisher, and select Properties.

  14. Choose Manage models and select OK.

  15. Create the Report Builder role if it doesn't exist:

    1. Open the Security folder.

    2. Right-click Roles, and select New Role.

    3. In Name, enter Report Builder.

    4. In Description, enter a description for the role so that users in the web portal know what the role is for.

    5. Add the following tasks: Consume reports, View reports, View models, View resources, View folders, and Manage individual subscriptions.

    6. Select OK to save the role.

Create role assignments that grant access to Report Builder

  1. Start the web portal.

  2. Select the gear icon on the top right of the web portal home page and choose Site Settings from the menu.
    Screenshot of the web portal gear icon and menu.

  3. Select Security.

  4. If a role assignment already exists for the user or group for which you want to configure Report Builder access, select Edit. Otherwise, select New Role Assignment. In Group or user, enter a Windows domain user or group account in this format: <domain>\<account>. If you're using forms authentication or custom security, specify the user or group account in the format that is correct for your deployment.

  5. Choose System User, and then select OK.

  6. Select Home.

  7. Select the Folder Settings tab.

  8. Select the Security tab.

  9. If a role assignment already exists for the user or group for which you want to configure Report Builder access, Select Edit.

    Otherwise, select New Role Assignment. In Group or user, enter a Windows domain user or group account in this format: <domain>\<account>. If you're using forms authentication or custom security, specify the user or group account in the format that is correct for your deployment.

  10. Choose Report Builder, and then select Apply.

  11. Repeat to create or modify role assignments for other users or groups.

Permissions granting Report Builder access on a SharePoint integrated mode report server

On a SharePoint integrated mode report server, Report Builder access is granted to SharePoint users who have either Contribute or Full Control permission levels.

If you use custom permission levels, you must include Add Items and Edit Items in the permission level. For more information about Report Builder access through built-in permission levels, see Use built-in security in Windows SharePoint services for report server items. For more information about permission requirements for custom permission levels, see Set permissions for report server operations in a SharePoint web application.

Authentication considerations and credential reuse

Report Builder opens its own connection to a report server. If you're not using Windows integrated security with single sign-on, users must reenter their credentials for the Report Builder connection to the report server.