locked
returning a generated image to a SSRS report in CRM 2011 RRS feed

  • Question

  • We have created a handler in a website that accesses an image from CRM, manipulates that image, and then returns it to the requestor (client). 

    If we call our handler from a web page it works great and returns the image as expected.  In this scenario the user's credentials are passed to the handler which uses those to call into CRM to return the image and some other data.

    However, if we call our handler from an SSRS report, we get a CRM security error.  For the user running the report, the credentials are not being passed. 

    We have read that SSRS requires configuration of the Unattended Execution Account (UEA) to make something like this work.  We configured the account with a domain user that is a valid user in CRM (with Sys Admin privileges).  However, when we configure UEA all of the CRM reports break.

    So what can we do to make this work?  We need to read an image from CRM, manipulate it, and return it to a SSRS report.

    Wednesday, January 11, 2012 6:09 PM

All replies

  • Are you using the CRM RS Extensions on the Reporting Server ? This affects how security is implemented in SSRS.

    If you're not using the CRM RS Extensions, I would expect your current model to work, though you may need to enable AD delegation. However, if you do use the CRM RS Extensions, then the report (and hence your handler) will not run under the context of the user's AD credentials (see http://mscrmuk.blogspot.com/2010/08/crm-40-reporting-services-connector-how.html for more info - although written for CRM 4, I believe it's still relevant for CRM 2011), which is probably why there's a suggestion to use the UEA.

    I can see 2 possible things to try:

    1. How is your handler connecting to CRM ? Is it possible to create an explicit NetworkCredential, rather than using DefaultCredentials ?
    2. Can you set your report up (or create a subreport) with a different Data Source from the rest of the CRM reports ? This might allow you to change the way RS uses credentials for your report only

    Microsoft CRM MVP - http://mscrmuk.blogspot.com http://www.excitation.co.uk
      
    Wednesday, January 11, 2012 7:39 PM
    Moderator