System and User Accounts Used in Reporting Services Installation
During Setup, several pages prompt you for credentials. This topic describes what the credentials are used for. It also describes other accounts that are used to complete Setup or perform ongoing operations.
Setup and the Reporting Services components use credentials in the following ways:
- Setup uses the credentials of the user installing the product to logon to a SQL Server instance and create the report server database.
- The report server uses credentials to connect to the report server database at run time. You can use the service account, a domain account, or a SQL Server login. You must specify which account to use during Setup.
Important SQL Server Hotfix 859 is required when you install a report server on Windows Server 2003, and you use the Service Account credentials to connect to the SQL Server instance hosting the report server database. Details about the Hotfix are described in Knowledge Base article 821334. If you do not want to apply the Hotfix, you must choose a SQL Server instance located on a different operating system, or choose a different credential type. To download the Hotfix, go to Microsoft Support.
- The ReportServer Windows service uses credentials to log on to the system. You must specify a service account during Setup.
- The Report Server Web service uses the ASP.NET account. You cannot specify a different account.
- Setup uses the IWAM_computername account to configure Internet Information Services (IIS). This account must be enabled before you run Setup.
- The IUSR_computername account must be enabled if you are using custom or forms-based authentication to authenticate users to a report server.
- A report server that is being added to a Web farm requires credentials to connect to a report server that already exists in a Web farm. You can specify Windows credentials, or connect using the security context of the user running Setup. These credentials need to have administrator permissions on the computer that is already part of the Web farm. For more information, see Installing a Report Server Web Farm.
Credentials for Installation
The user who runs Setup must be a member of the local system administrator's group, and have permission to perform the following tasks:
- Create logins
- Create roles
- Create databases
- Assign permissions to users
If you do not want to use the credentials of the user running Setup, alternative credentials can be supplied for creating the report server database by using the command line setup utility.
Credentials for Ongoing Operations
Specify the credentials that are used for ongoing server connections on the Reporting Services Database Setup page of Setup. You can specify either Windows Authentication or SQL Server Authentication credentials. If you specify a SQL Server account, Setup creates the account if it does not already exist. If you specify a Windows account, the user account must already exist. The account specified is granted public and RSExecRole roles for the report server database, and the RSExecRole role for the master, msdb and ReportServerTempDB databases. Check with the database administrator if you are unsure about which credentials to use.