What Can Be Secured?

Although it might not be the most efficient approach, the reality is that just about every report item can be secured individually. Some things that don't follow this rule are subscriptions and schedules because they are used in conjunction with a report and not as an independent part of it. Table 18.1 describes how report items and their security work.

Table 18.1. Report Items and Effects of Security

Report Item	How Security Applies
Folder	Securing a folder usually ends up securing all the items within that folder. When SSRS is installed, only local administrators are Content Managers on the root folder. This ensures that no user can browse the catalog, unless given explicit rights to do so. The exception to this is the My Reports folder. My Reports, if it's enabled, creates a pseudofolder within the catalog in which users are given permissions to publish their own reports .
Report	Reports and linked reports can be secured to control levels of access. For example, the View Reports task allows users to view a report as well as report history, whereas Manage Reports allows them to change report properties. Manage Report History allows users to generate snapshots.
Model	Primarily used to secure access to the model, it can also be used to secure reports for which the model acts as a data source. Models can also be secured internally by securing model items with perspectives, specifying role assignments on all or part of a model, and securing items such as the root node, folders, entities, and relationships within the model.
Resources	Resources are items in the Report Server that provide content to user. An example of a resource can be an HTML file or Word document. Securing a resource limits access to the resource and its properties. The View Resources permissions are needed to access the resources.
Shared data sources	Securing shared data sources limits access to the data source and its corresponding properties. To view the data source properties, users need the View Data Sources permission; likewise Manage Data Sources gives permissions to modify them