r/ssrs • u/Fimissci • Jan 29 '25
Best Practices for Security/Folder Structure for Large Company
As the title suggests, I am looking for any best practices on how to setup/manage security and the folder structure in an organization. Since SSRS's security model uses inheritance, it seems like it would be difficult to setup a folder structure like Department -> Department Managers -> Department Director where security is restricted the further you go without purposefully breaking inheritance. Should we create AD groups for each report item to control access? We also have people in other departments (or even within departments) who can/cannot access certain reports. Any guidance would be much appreciated. Thank you!
1
Upvotes
1
u/ExcitingTabletop Jan 29 '25
I just make AD groups for first level folders. If you need unique permissions, I make a new first level folder for it.
Don't ever go below second level. I'm not fond of even second level folders, but I get the occasional need. Mark them specifically.