Let’s discuss SCOM SSRS permissions. The SCOM Reporting role install really comes down to three (3) things – permissions, latest SSRS EXE downloaded (for install 2019, 2022), and ReportExtensions configuration. I’ve hit some permission issues that need more ‘how to’ details.
Set SCOM Admins group permissions
Whether the permissions are set up as part of a group policy (GPO) or not, if these steps are missing, expect problems.
Verify that your SCOM Admins domain group is a local administrator on the SCOM servers (SSRS server in this case)
Right click on Start > Computer Management
Expand System Tools
Expand Local Users and Groups
Click on Groups
Double click on Administrators
Verify SCOM Admins group, or specific service/MSA accounts are listed
Click OK
Set SQL Instance permissions for SCOM Admins group
Reference Holman’s QuickStart > Install SCOM Reporting Role…
- Log on using your domain user account that is a member of the OMAdmins group, and has “sysadmin” role level rights over the SQL instance.
RDP to server with SSMS that connects to SQL server
Connect to Database Engine
Expand instance , then expand Security folder, thirdly expand Logins folder
Right click on the SCOM Admins group and select properties
In the pop-up, click on SQL Server Role
Verify that sysAdmin
Follow similar steps if using a domain connected SVC/MSA account when configuration differs from Holman’s QuickStart template.
Additional troubleshooting from the SCOM install can be found in the user’s directory – C:\Users\<accountHere>\AppData\Local\SCOM\LOGS
Find additional details in the SQL install logs
C:\Program Files\Microsoft SQL Server\MSRS13.MSSQLSERVER\Reporting Services\LogFiles
NOTE that the Instance and version 'MSRS13.MSSQLSERVER' can change
Additional documentation and relevant links
The go-to reference is Holman’s QuickStart deployment guides for SCOM2019 forward list the how-to starting point.
Holman Quick Start links:
https://kevinholman.com/2022/05/01/scom-2022-quickstart-deployment-guide/
https://kevinholman.com/2019/03/14/scom-2019-quickstart-deployment-guide/
SSRS learn.microsoft.com site article https://learn.microsoft.com/en-us/troubleshoot/system-center/scom/cannot-deploy-operations-manager-reports
SSRS Error occurred when invoking the authorization extension https://learn.microsoft.com/en-us/answers/questions/266488/installing-scom-2019-reporting-ssrs-2019-error-an
Morning, I have the standard “extensions” that SSRS adds upon install. I added ,*.* to the end of that line of extensions.
I get the following error in SCOM.
10/10/2024 9:09:10 AM
Property Name Property Value
Status Error
PortalStatusCode 500
PortalErrors An error occurred when invoking the authorization extension. (rsAuthorizationExtensionError) Value does not fall within the expected range.
HttpStatusCode
RestStatusCode 0
RestServiceErrors
Url http://+:80/ReportServer
I have tried looking in the logs and config files I could find but I do not see anything that I understand.
Could you give me some pointers or suggestions?
Thank you,
Tony
Morning, I wanted to add that everything checks out in the Report Server Configuration Manager on the server where SSRS 2022 is installed.
Tony
Good morning,
I’d check rights for the account you’re logged into, and the specified account for the SCOM Reporting role wizard.
Some additional help is in the SCOM install logs\AppData\Local\SCOM\LOGS
Typically found under C:\Users\
Holman has this in his QuickStart guides for SCOM Reporting Role:
Log on using your domain user account that is a member of the OMAdmins group, and has ‘sysadmin’ role level rights over the SQL instance.
SCOM 2019 QuickStart link https://kevinholman.com/2019/03/14/scom-2019-quickstart-deployment-guide/
The specific rsAuthorizationExtensionError link:
https://learn.microsoft.com/en-us/answers/questions/266488/installing-scom-2019-reporting-ssrs-2019-error-an