Using Predefined Roles
Reporting Services installs with predefined roles that you can use to grant access to report server operations. Each predefined role describes a collection of related tasks. You can assign groups and user accounts to predefined roles to provide immediate access to report server operations.
How to Use Predefined Roles
Review the predefined roles to determine whether you can use them as is. If you need to adjust the tasks or define additional roles, you should do this before you begin assigning users to specific roles.
Identify which users and groups require access to the report server, and at what level. Most users should be assigned to the Browser role or the Report Builder role. A smaller number of users should be assigned to the Publisher role. Very few users should be assigned to Content Manager.
When you are ready to assign user and group accounts to specific roles, use Report Manager. For more information, see How to: Grant User Access to a Report Server (Report Manager).
Predefined Role Definitions
Predefined roles are defined by the tasks that it supports. You can modify these roles or replace them with custom roles.
Scope defines the boundaries within which roles are used. Item-level roles provide varying levels of access to report server items and operations that affect those items. Item-level roles are defined on the root node (Home) and all items throughout the report server folder hierarchy. System-level roles authorize access at the site level. Item and system-level roles are mutually exclusive but are used together to provide comprehensive permissions to report server content and operations.
The following table describes the predefined roles, scope, and how they are used.
Predefined role |
Scope |
Description |
|---|---|---|
Item |
Includes all item-level tasks. Users who are assigned to this role have full permission to manage report server content, including the ability to grant permissions to other users, and to define the folder structure for storing reports and other items. |
|
Item |
Users who are assigned to this role can add items to a report server, including the ability to create and manage folders that contain those items. |
|
Item |
Users who are assigned to this role can run reports, subscribe to reports, and navigate through the folder structure. |
|
Item |
Users who are assigned to this role can create and edit reports in Report Builder. |
|
Item |
Users who are assigned to this role can manage a personal workspace for storing and using reports and other items. |
|
System |
Users who are assigned to this role can enable features and set defaults, set site-wide security, create role definitions in Management Studio, and manage jobs. |
|
System |
Users who are assigned to this role can view basic information about the report server such as the schedule information in a shared schedule. |