Microsoft® SQL Server® 2012 Bible

1272

Part IX: Business Intelligence

System-Level Roles

System-level roles grant access to server functions that are not item-specifi c. Two system-

level roles are created when the report server is installed: System Administrator and System

User. Table 56-2 shows the tasks granted to these roles by default.

TABLE 56 -2 Default System Roles

Task System Administrator System User

Execute report defi nitions X X

Generate events

Manage jobs X

Manage report server properties X

Manage report server security X

Manage roles X

Manage shared schedules X

View report server properties X

View shared schedules X

You can change the default role defi nitions by expanding the System Roles folder in Object

Explorer inside Management Studio, right-clicking the role to be changed, and selecting

Properties. If necessary, you can create additional roles by right-clicking the System Roles

folder and choosing New System Role. When defi ned in SSMS, managing the membership of

these roles is handled by the Report Manager application, as described in the following section.

Best Practice

You need to be consistent in your approach to granting access to the Report Manager and to items

within the Report Manager. Consider your environment when choosing how to manage and assign

access and whether you grant access to Active Directory groups or to individual users. If you have

already taken the time to create Active Directory groups in your organization, you can most likely

leverage your existing groups to administer access to your report server.

For example, if you have an Active Directory group for accounting, you can simply create a new sys-

tem role assignment for that group to grant all the accounting members access to the report server.

Perhaps you have an Accounting folder with accounting reports to which only accounting employees

should have access. When creating this folder, simply adjust the inherited role assignments to ensure

that only the accounting group has access.

Regardless of which strategy you choose (user versus groups), maintain a consistent approach to

minimize maintenance, research, and troubleshooting efforts in the future.

c56.indd 1272c56.indd 1272 7/31/2012 10:34:18 AM7/31/2012 10:34:18 AM

http://www.it-ebooks.info