sql server - SQL database permissions required to use impersonation from SSRS connection -


i encountering following error when try specify datasource ssrs sql server db (2008) using "credentials stored securely in server" - specified windows account "s2\killian" option "impersonate authenticated user after connection has been made" checked.

msg 15157, level 16, state 1, line 1 setuser failed because of 1 of following reasons: database principal 's2\killian' not exist, corresponding server principal not have server access, type of database principal cannot impersonated, or not have permission.

obviously method of impersonation uses setuser() function behind scenes , msdn documentation states dbowner permissions required in order use function. getting above error when using dbowner. not in position use sysadmin because of security policy.

does know how mechanism of authentication , impersonation working without assigning sysadmin priveleges on sql server database windows account used ssrs data source.

is there way of getting setuser() work without sysadmin priveleges?

thanks killian

the clue "the database principal 's2\killian' not exist"

any connection uses context change on database side (eg setuser, execute as etc) requires impersonated user exists in sys.server_principals and/or sys.database_principals.

assuming use ad group, not individual logins, cause same error above. outside of permissions. if db_owner, can impersonate @ database level. if can't, it's because of previous paragraph.

i've thought idiotic option ssrs have. msdn says uses setuser deprecated. ideally, you'd impersonate before connection possible asp.net apps don't know ssrs (which asp.net app of course)

sorry lack of "do , works" answer...


Comments

Popular posts from this blog

asp.net - repeatedly call AddImageUrl(url) to assemble pdf document -

java - Android recognize cell phone with keyboard or not? -

iphone - How would you achieve a LED Scrolling effect? -