Report Server

[biflosh]

Hello,

I have setup Power BI Report Server 1 month ago, and all worked until last week.

Service is executed by local user which is administrator.

All users which belong to a specific group AD (AD\group-app) which are also admin on the server can't see folders in the home page and there is an error message : "Can't load content folders".

We can see favorites, and when we search a folder that we don't see, we are able to go to the folder and see all contents.

In the log RSPortal, there is the following error : 

2019-02-11 15:02:39.1748|INFO|33|Received request GET /api/v2.0/catalogitems%28665f3df3-53a2-4c50-a45b-47d68f837cae%29/Model.Folder/catalogitems/| RequestID = s_d12a988f-4694-46d8-9088-1b1fe7d42b77 
2019-02-11 15:02:39.1848|ERROR|33|OData exception occurred: System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'AD\XXX' are insufficient for performing this operation.
   at Microsoft.ReportingServices.Library.DataSourceCatalogItem.ThrowIfNoAccess(DatasourceOperation operation)
   at Microsoft.ReportingServices.Library.GetDataSourceContentsAction.PerformActionNow()
   at Microsoft.ReportingServices.Library.RSSoapAction`1.Execute()
   at Microsoft.ReportingServices.Portal.Repositories.CatalogItemRepository.GetDataSource(IPrincipal userPrincipal, String path)
   at Microsoft.ReportingServices.Portal.Repositories.CatalogItemRepository.<>c__DisplayClass35_0.<TraverseFolder>b__1(FavoriteableCatalogItemDescriptor i)
   at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext()
   at System.Linq.Enumerable.WhereEnumerableIterator`1.MoveNext()
   at System.Collections.Generic.List`1..ctor(IEnumerable`1 collection)
   at Model.FolderRepository.LoadCatalogItems()
   at Model.Folder.get_CatalogItems()
   --- End of inner exception stack trace ---
   at Microsoft.ReportingServices.Portal.ODataWebApi.Controllers.SegmentHandlers.PropertySegmentHandler.Handle(Object source, ODataPathSegment segment)
   at Microsoft.ReportingServices.Portal.ODataWebApi.Controllers.Reflection.ReflectionODataController`1.Get(ODataPath oDataPath)
   at lambda_method(Closure , Object , Object[] )
   at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ActionExecutor.<>c__DisplayClass10.<GetExecutor>b__9(Object instance, Object[] methodParameters)
   at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext controllerContext, IDictionary`2 arguments, CancellationToken cancellationToken)
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.Controllers.ApiControllerActionInvoker.<InvokeActionAsyncCore>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.Filters.ActionFilterAttribute.<CallOnActionExecutedAsync>d__5.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Web.Http.Filters.ActionFilterAttribute.<CallOnActionExecutedAsync>d__5.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.Filters.ActionFilterAttribute.<ExecuteActionFilterAsyncCore>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.Controllers.ActionFilterResult.<ExecuteAsync>d__2.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.Controllers.ExceptionFilterResult.<ExecuteAsync>d__0.MoveNext().| RequestID = s_d12a988f-4694-46d8-9088-1b1fe7d42b77 
2019-02-11 15:02:39.1848|INFO|29|Sending response. Response code AD\XXX 500, Elapsed time 0:00:00,0099879| RequestID = s_d12a988f-4694-46d8-9088-1b1fe7d42b77 

However, all other users can show all folders in home page according authorized rights.

I have tried to give all rights to my AD account in the site settings, and in manage folders tab, but same results.

Thanks for your help.

[Jon-Heide]

Note that server administrators by default have sysadmin permissions to grant access. However, double check that the affected users have both system level and item level permissions. For more info see: 

https://docs.microsoft.com/en-us/sql/reporting-services/security/granting-permissions-on-a-native-mo...

[biflosh]

User which runs report server services is a local user and a member of groups Administrators of the system.

AD account that I use is set as System Administrator and System user in Site settings.

And from side Item management in the homepage, I set in "Manage folder" all roles possible to my account. 

And even with that, when I come back to the homepage, the same error message.

However, search works.

Thanks for your help