Reports permissions by user.

[fsoares]

I have the reports working and i would like to set permissions in a way that specific users just see specific reports via web browser.

I have tried to do this but for some reason the permissions reset and the users can see all the reports.

Is there a way to do this ?

i am using sccm 2012 r2 sp1

[GarthMJ]

What i would like to do is when the user goes to the reports website he would only see the reports and folders i gave him permissions to.

i only have the default reports and folders that come with the installation.

I can do it.. but the permissions revert.

right now i removed the users from the reports, one by one, and also remove the "inheriting rights from parent objects" in the sccm console.

But when the user goes to the reports website, he can see the folders, all the folders but no reports, which is part of what i want to do.

When i go to the permissions on the reports website and remove the use from the folder, those are the ones that revert after 10 minuts... and the user can see the folder again.

 

Exactly what reports are to trying to grant access too?

[fsoares]

right now i need to give access just to the metering software reports to a couple of users, in the future i will need more, so i have to figure this out.

[GarthMJ]

So you want to grant permission to SW metering reports. OK

1. Create a AD security group.
2. Create a CM12 for only the SWM reports + a few extra permission.
3. Assign the AD security group to the CM12 Security Role. with access to all systems.

 

These blog will get you started.

http://www.enhansoft.com/freetools/enhansoft-report-reader-configmgr-2012-r2

http://www.enhansoft.com/blog/new-tool-for-creating-configuration-manager-2012-report-reader-ad-security-groups

http://www.enhansoft.com/blog/creating-configuration-manager-2012-report-reader-ad-security-groups

[fsoares]

will try that and see where it goes. Thank you

[fsoares]

This is what i am getting... the users see all the folders.. they can only see the content of the firts two (Administrative Security, Alerts) but they can still see all the folders despite they are empty for them but still they are there causing confusion.

Is this that i am trying to do even possible ?

[GarthMJ]

What exactly did you setup for the Security role? what does this have to do with Software Metering?

[fsoares]

Security role i have the one i downloaded from the links you posted.

I would like the users to see just the folder with the software metering reports.

[GarthMJ]

If you used the un-edit Report reader security role, it will grant them access to ALL CM12 reports assuming that you grant that Sec role all systems collections.

1. So you edit to edit it to only grant access to SWM reports. + a few extra one.
2. Exactly what collection(s) did you grant the AD security group access too?
3. Have the users logon after being added to the security group?

[fsoares]

1 - Yes i would like the users to see just t he folders/reports they have access

2- All Systems, All Users and User Groups, Default (security scope)

3- Yes i have rebooted and logged on every time i make changes to make sure the policies are applied.

[fsoares]

What i am asking... is that even possible ?