question

PrinsAndre-6100 avatar image
0 Votes"
PrinsAndre-6100 asked PrinsAndre-6100 edited

SSRS 2017: unable to grant domain group rights to reports

as part of a System Center Operations Manager (SCOM) installation, we also installed SQL/SSRS 2017. Reporting is working fine - I can grant AD users access to view the reports directly via http://reportserver/reports. only when I try to grant an AD group rights, it fails with the message 'The user or group name 'NAME' is not recognized. I tried granting rights to all 3 types of security groups (Local Domain, Global, Universal) and all 3 types fail. the fact that I can add a DOMAIN\username AD-user means that SSRS can connect to AD, so I am puzzled why groups cannot be added ?!??!? ![72416-image.png][1] [1]: /answers/storage/attachments/72416-image.png

sql-server-reporting-servicesmsc-operations-manager
image.png (41.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

CyrAz avatar image
0 Votes"
CyrAz answered PrinsAndre-6100 edited

The theory is that you can't directly add groups to ssrs permissions once the ssrs instance has been reconfigured by SCOM.
You need to create a SCOM role, add the AD group to that role and then add the role's guid to ssrs permissions.
Read more here : https://myitworld.azurewebsites.net/2017/01/09/manage-report-operator-user-role-scom-2016/

However, there have been reports of ongoing issues with granting access to ssrs for quite a while now : https://myitworld.azurewebsites.net/2017/01/09/manage-report-operator-user-role-scom-2016/


https://social.technet.microsoft.com/Forums/en-US/cf56abf4-cd72-48fe-9ceb-05cf05b98e81/ssrs-2017-scom-2019-cannot-browse-folders?forum=operationsmanagerreporting

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I did already look in User Roles in SCOM administration, but I did not realize how to add it in the SSRS page itself.

using the instructions I was able to add a new group with only browsing rights.

PS. when you copy the Identity ID, make sure you put { } brackets around the ID
73279-snap04007.png73318-snap04008.png



Thank you for the response!!!
I have asked to test it and am still waiting for confirmation, but I believe this is the solution for the problem !!

0 Votes 0 ·
snap04007.png (2.7 KiB)
snap04008.png (12.1 KiB)