nerdexam
Microsoft

70-243 · Question #134

You manage a system Centre 2012 R2 Configuration Manager Service Pack1 (SP1) stand-alone primary site that includes the servers configured as shown in the following table: You need to provide a user…

The correct answer is D. On Server1, assign user1 a security role by using the Configuration Manager Console. In SCCM 2012 R2, report access for users is granted through security roles assigned in the Configuration Manager Console, not directly in SQL Reporting Services.

security management

Question

You manage a system Centre 2012 R2 Configuration Manager Service Pack1 (SP1) stand-alone primary site that includes the servers configured as shown in the following table:

You need to provide a user named User1 with the ability to run reports. What should you do?

Exhibit

70-243 question #134 exhibit

Options

  • AOn Server2, modify the permission of the reporting services folder by using Report Manager.
  • BOn Server2, modify the Configuration Report Users security role by using Report Managers.
  • COn Server3, modify the database permission by using SQL server Management Studio.
  • DOn Server1, assign user1 a security role by using the Configuration Manager Console.

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    5% (2)
  • C
    3% (1)
  • D
    90% (35)

Why each option

In SCCM 2012 R2, report access for users is granted through security roles assigned in the Configuration Manager Console, not directly in SQL Reporting Services.

AOn Server2, modify the permission of the reporting services folder by using Report Manager.

Modifying SSRS folder permissions via Report Manager bypasses SCCM's role-based access control and is not the supported method for managing report access in Configuration Manager.

BOn Server2, modify the Configuration Report Users security role by using Report Managers.

The 'Configuration Report Users' role does not exist as a standard Report Manager security role; SCCM reporting access is managed through the Configuration Manager Console, not Report Manager.

COn Server3, modify the database permission by using SQL server Management Studio.

Modifying SQL Server database permissions directly would grant database-level access, not SCCM report-running rights, and violates SCCM's intended administrative model.

DOn Server1, assign user1 a security role by using the Configuration Manager Console.Correct

The correct method to grant a user the ability to run reports in SCCM is to assign them a security role (such as the built-in 'Report Viewer' role) using the Configuration Manager Console on the primary site server (Server1). This integrates with SCCM's role-based administration model, which controls access to all console features including reporting.

Concept tested: SCCM role-based administration for report access

Source: https://learn.microsoft.com/en-us/mem/configmgr/core/servers/manage/reporting

Topics

#reporting permissions#security roles#role-based administration#Report Manager

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 70-243 Practice