Friday, March 9, 2012

Dont want to use NT Account

Good Day,
I would like to create 3 roles in SQL Server 2000 Reporting Services
but do not have corresponding NT groups.
The sys-admin has asked that I do not create these 3 NT groups to use
in Reporting Services, but to find some other way to create these roles
without corresponding NT groups. The 40 or so Users that would be
assigned to these 3 groups have NT user accounts. Does anyone know if
there is a way I can do this? (i hope that all made sense - clear as
mud)
The Books Online state "you must specify domain groups or users", so
I'm assuming this cannot easily be done. I also saw another post in
this forum that said if you do not use NT users/groups you must
implement some sort of custom authentication. Does anyone have a link
to some documentation on this?
Thanks!
MichelleI think you're mixing role and group, but I think I get the gist of what
you're saying.
You can create the roles in RS independent of any groups/users you have.
If you have multiple users to assign these roles to, you really should
create NT groups for them. Otherwise the managment cost just rises too
much. What is the administrator's justification for not allowing you to
create the desired groups? Can you reuse any existing groups?
-Lukasz
This posting is provided "AS IS" with no warranties, and confers no rights.
<Michelle@.bwalk.com> wrote in message
news:1106774994.929964.6650@.z14g2000cwz.googlegroups.com...
> Good Day,
> I would like to create 3 roles in SQL Server 2000 Reporting Services
> but do not have corresponding NT groups.
> The sys-admin has asked that I do not create these 3 NT groups to use
> in Reporting Services, but to find some other way to create these roles
> without corresponding NT groups. The 40 or so Users that would be
> assigned to these 3 groups have NT user accounts. Does anyone know if
> there is a way I can do this? (i hope that all made sense - clear as
> mud)
> The Books Online state "you must specify domain groups or users", so
> I'm assuming this cannot easily be done. I also saw another post in
> this forum that said if you do not use NT users/groups you must
> implement some sort of custom authentication. Does anyone have a link
> to some documentation on this?
>
> Thanks!
> Michelle
>|||Note that you don't have to create groups in the domain. You can have a
local group that you add domain users or domain groups. Then you assign that
group to a role. Then the admin is out of the loop and everyone is happy.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Lukasz Pawlowski [MSFT]" <lukaszp@.online.microsoft.com> wrote in message
news:OK4btSCBFHA.2584@.TK2MSFTNGP09.phx.gbl...
> I think you're mixing role and group, but I think I get the gist of what
> you're saying.
> You can create the roles in RS independent of any groups/users you have.
> If you have multiple users to assign these roles to, you really should
> create NT groups for them. Otherwise the managment cost just rises too
> much. What is the administrator's justification for not allowing you to
> create the desired groups? Can you reuse any existing groups?
> -Lukasz
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> <Michelle@.bwalk.com> wrote in message
> news:1106774994.929964.6650@.z14g2000cwz.googlegroups.com...
> > Good Day,
> >
> > I would like to create 3 roles in SQL Server 2000 Reporting Services
> > but do not have corresponding NT groups.
> >
> > The sys-admin has asked that I do not create these 3 NT groups to use
> > in Reporting Services, but to find some other way to create these roles
> > without corresponding NT groups. The 40 or so Users that would be
> > assigned to these 3 groups have NT user accounts. Does anyone know if
> > there is a way I can do this? (i hope that all made sense - clear as
> > mud)
> >
> > The Books Online state "you must specify domain groups or users", so
> > I'm assuming this cannot easily be done. I also saw another post in
> > this forum that said if you do not use NT users/groups you must
> > implement some sort of custom authentication. Does anyone have a link
> > to some documentation on this?
> >
> >
> > Thanks!
> > Michelle
> >
>|||Hi guys,
My sys admin believes that creating these 3 NT groups will make make
the active directory tough to manage. I think that if these 3 whole
groups will set the managablilty over the top then perhaps they've got
other issues, but I'm no sys admin and I'm not privy to how they have
been setting up the NT user accounts and groups.
Would you happen to have instructions or documentation on how I add
roles in RS without referencing corresponding NT groups? All of the
documentation I have found only deals with NT accounts, and when I gave
it a try an error was thrown because an account wasn't found. What I
would like to do is create my own role in RS that I can add the
existing NT User accounts to.
Thanks again!
Michelle|||> My sys admin believes that creating these 3 NT groups will make make
> the active directory tough to manage.
Your admin likely doesn't want to handle the requests to add/'remove people
from the group. Can you think of creative solutions to this problem? Can
s/he assign you the permission to add/remove users from these groups?
> Would you happen to have instructions or documentation on how I add
> roles in RS without referencing corresponding NT groups? All of the
> documentation I have found only deals with NT accounts, and when I gave
> it a try an error was thrown because an account wasn't found. What I
> would like to do is create my own role in RS that I can add the
> existing NT User accounts to.
In RS a role has a particular meaning - it is a set of tasks you can assign
to a user or group on a particular item/scope. RS itself does not have a
groups mechanism. Natively we use the windows groups functionality. If
local machine groups do not suffice for you, you'll need to convince your
admin.
-Lukasz
This posting is provided "AS IS" with no warranties, and confers no rights.
<Michelle@.bwalk.com> wrote in message
news:1106838254.192842.124560@.z14g2000cwz.googlegroups.com...
> Hi guys,
> My sys admin believes that creating these 3 NT groups will make make
> the active directory tough to manage. I think that if these 3 whole
> groups will set the managablilty over the top then perhaps they've got
> other issues, but I'm no sys admin and I'm not privy to how they have
> been setting up the NT user accounts and groups.
> Would you happen to have instructions or documentation on how I add
> roles in RS without referencing corresponding NT groups? All of the
> documentation I have found only deals with NT accounts, and when I gave
> it a try an error was thrown because an account wasn't found. What I
> would like to do is create my own role in RS that I can add the
> existing NT User accounts to.
>
> Thanks again!
> Michelle
>

No comments:

Post a Comment