Grant permissions to view or create reports in TFS

By adding a report server to your TFS (on-premises) deployment, you can access a wealth of data about your team's projects, such as build quality, bug trends, burndown, and test progress. SQL Server Reporting Services (SSRS) reports provide insight to help teams manage work and improve processes.

Now that you've uploaded reports, you'll want to enable members of your team to view or manage them. Also, to create or modify reports, you'll need to grant them access to read databases.

Add report viewers to the Browser role. Add TFS report authors to the Team Foundation Content Manager role.

Tip Tip

Permissions to access Report Manager are managed separately from TFS permissions. Even if you have added team members to a TFS group, you will still have to add them to a Report Manager role.

  1. If you haven't been added to the Content Manager role for Reporting Services, get added by someone who has been added to this role.

  2. From the Report Manager home page, open Folder Settings.

    Add users to an SSRS Report Manager role

    The URL is http://ReportServer/Reports/Pages/Folder.aspx, or if using a named instance, http://ReportServer/Reports_InstanceName/Pages/Folder.aspx.

  3. Open New Role Assignment.

    Open SSRS new role assignment
    Tip Tip

    To limit access to reports defined for a team project or team project collection, first navigate to the corresponding folder and then open New Role Assignment.

  4. Add the account name and select their role.

    Assign user to a role in Report Manager

If members need to create or customize reports, add their accounts to the TfsWarehouseDataReader role. Report authors need read access to both the relational data warehouse and Analysis Services cube. Team members who create Excel reports from work item queries or by connecting to the cube need only read access to the cube.

  1. If you aren't an administrator for the TFS database, get added as one.

  2. Connect to the Database Engine for TFS using SQL Server Management Studio.

    Connect to database engine
  3. Open the properties page for the TfsWarehouseDataReader role under the Databases/Tfs_Warehouse/Security/Roles/Database Roles folder.

    Open Tfs_Warehouse data reader role properties
  4. Add the account.

    Add member to Tfs_Analysis data reader role
  5. Next, connect to the Analysis Services database.

    Connect to Analysis Services database
  6. Open the properties page for the TfsWarehouseDataReader role under the Databases/Tfs_Analysis/Roles folder.

    Open Tfs_Analysis data reader role properties
  7. Add the account.

    Add member to Tfs_Analysis data reader role
Important note Important

Accounts that you add to the TfsWarehouseDataReader roles can view data for all team projects that are hosted in all team project collections in the TFS deployment. There is no way to limit access to a team project or collection.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft