Chapter 18. Securing Report Server Items

In This Chapter

• Reporting Services Security Model

• Defining Custom Roles

Because SSRS is a .NET application, many of the existing .NET security paradigms come into play when securing access to the Report Server. From the end user 's viewpoint, SSRS uses role-based authorization built on top of Windows authentication. If using a custom authentication mechanism, the underlying principals are the same. It is simply up to the authorization mechanism to define valid users and roles (called principals).