The Reporting Services Service Account is the account that the Reporting Services application pool (called ReportServer) will run under. This account probably already exists in your environment, but there are some permissions that should be validated to ensure that the K2 integration with Reporting Services functions properly.
The rest of this guide will use domain\Reporting Services Service Account as a placeholder for the Reporting Services Service Account name. When installing K2 in your environment, replace this placeholder with your actual account name.
Application Pool Rights
The SQL Reporting Services Service Account will require elevated permissions to run the application pool. We will use the aspnet_regiis command to configure this. This tool ships with the .NET Framework, and takes the pain out of configuring all the required NTFS permissions, IIS_WPG group membership, security policy user rights assignments, and IIS metabase access rights. For more information, see the MSDN article on setting security rights for .NET Applications, at http://msdn2.microsoft.com/en-us/library/ms998297.aspx.
To use the aspnet_regiis command, perform the following steps:
 |
Open a command prompt (Start > Run > cmd) |
 |
Change directories to the .NET Framework folder (C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727) |
 |
Type aspnet_regiis -ga domain\Reporting Services Service Account and hit Enter |
 |
After the command completes, type iisreset and hit Enter |
Reporting Services Permissions
The SQL Reporting Services Service Account will also require permissions on the SQL Reporting Services databases. To set these permissions, do the following:
|
Open Reporting Service Configuration (Start > All Programs > Microsoft SQL Server 2012 > Configuration Tools > Reporting Services Configuration Manager) |
|
Connect to the appropriate Instance and ensure the Current Report Server is started (click the Start button if needed.) |
|
Ensure that the SQL Reporting Services Service Account credentials are correct on the Database tab. Apply any changes. |
|
Close the Reporting Services Configuration Manager window |
 |
Open a command prompt and perform an IIS Reset again (type iisreset and hit Enter) |
Additional Configuration.
In order for users to browse the reports on the server, the following permissions must be configured:
Server Properties => Permissions, add <DOMAIN>\Domain Users place a check in the box for the role System User
Home Folder Properties => Permissions, add <DOMAIN>\Domain Users place a check in the box for the role Browser
 |
While infrastructure changes are required by K2, each environment is different and has its peculiarities which must be taken into account. Modifying the infrastructure could have unforeseen results if the changes are not appropriately understood or managed. Given the broad spectrum of underlying infrastructure utilized, it is recommended that a panel or committee with appropriate skill in each area concerned be assembled to outline the underlying infrastructure changes and gauge the impact of the required changes. |
