Grant permissions to view or create SSRS reports in TFS
By adding a report server to your TFS (on-premises) deployment, you can access a wealth of data about your team's projects, such as build quality, bug trends, burndown, and test progress. SQL Server Reporting Services (SSRS) reports provide insight to help teams manage work and improve processes.
.png "Step 1: Add a report server")
|
.png "Step 2: Upload reports")
|
.png "Step 3: Grant permissions")
|
.png "Step 4: Review team tasks")
|
Now that you've uploaded reports, you'll want to enable members of your team to view or manage them. Also, to create or modify reports, you'll need to grant them access to read databases.
Add accounts to predefined roles to view or manage reports
Add report viewers to the Browser role. Add TFS report authors to the Team Foundation Content Manager role.
Tip
Permissions to access Report Manager are managed separately from TFS permissions. Even if you have added team members to a TFS group, you will still have to add them to a Report Manager role.
If you haven't been added to the Content Manager role for Reporting Services, get added by someone who has been added to this role.
From the Report Manager home page, open Folder Settings.
.png "Add users to an SSRS Report Manager role")
The URL is http://ReportServer/Reports/Pages/Folder.aspx, or if using a named instance, http://ReportServer/Reports_InstanceName/Pages/Folder.aspx.
Open New Role Assignment.
.png "Open SSRS new role assignment")
Tip
To limit access to reports defined for a team project or team project collection, first navigate to the corresponding folder and then open New Role Assignment.
Add the account name and select their role.
.png "Assign user to a role in Report Manager")
Add report authors to database roles
If members need to create or customize reports, add their accounts to the TfsWarehouseDataReader role. Report authors need read access to both the relational data warehouse and Analysis Services cube. Team members who create Excel reports from work item queries or by connecting to the cube need only read access to the cube.
If you aren't an administrator for the TFS database, get added as one.
Connect to the Database Engine for TFS using SQL Server Management Studio.
.png "Connect to database engine")
Open the properties page for the TfsWarehouseDataReader role under the Databases/Tfs_Warehouse/Security/Roles/Database Roles folder.
.png "Open Tfs_Warehouse data reader role properties")
Add the account.
.png "Add member to Tfs_Analysis data reader role")
Next, connect to the Analysis Services database.
.png "Connect to Analysis Services database")
Open the properties page for the TfsWarehouseDataReader role under the Databases/Tfs_Analysis/Roles folder.
.png "Open Tfs_Analysis data reader role properties")
Add the account.
.png "Add member to Tfs_Analysis data reader role")
Important
Accounts that you add to the TfsWarehouseDataReader roles can view data for all team projects that are hosted in all team project collections in the TFS deployment. There is no way to limit access to a team project or collection.