New Role Assignment / Edit Role Assignment Page (Report Manager)

Use the New Role Assignment or Edit Role Assignment page to grant permissions to report server items and operations. Each user who requires access to a report server must have a role assignment that defines the level of access. You can create role assignments at the root node, or on a specific report, model, folder, resource, or shared data source. Reporting Services security is enforced through role assignments that you apply to items. A role assignment matches a group or user to a role definition, where each role definition identifies the tasks that groups or users can perform with regards to a specific item.

To open this page, select any item, click the Properties tab at the top of the page, and then click the Security tab at the side of the page. You must have permission to set security at the item level. If an item currently inherits security from a parent item, click Edit Item Security to change the security settings.

Item-level role assignments can have a broad impact. Although they can be associated with a single report or folder, they can also be defined at a high level in the folder hierarchy and be inherited by folders and items that are lower in the tree. For more information, see How to: Grant User Access to a Report Server (Report Manager) and Tutorial: Setting Permissions in Reporting Services.


  • Group or User Name
    Type the name of a group or user account for which the role assignment is being created. The group or user name must be a valid Windows domain account. Enter the account in this format: <domain>\<account>.

    If you are editing a role assignment, the group or user account name appears as hyperlink in the permissions properties page of the item. You can click the group or user account name to edit the role assignment.

  • Role
    Shows all roles defined on the report server that can be used to define security for items. When you create or change a role assignment for a report or folder, select one or more roles until the combined set of tasks describe the actions that the user should be allowed to perform. To view the set of tasks that each role supports, use SQL Server Management Studio. You cannot view, create, modify, or delete roles in Report Manager. For instructions, see How to: Create, Delete, or Modify a Role (Management Studio).

  • Description
    Shows additional information about the role. For predefined roles such as Browser or Content Manager, the description summarizes the tasks that each role supports.

  • Delete
    Click to delete an existing role assignment. Select the check box next to the group or user name before clicking Delete. You cannot delete a role assignment if it is the only one left (each item must have a minimum of one role assignment).