CRM 2011 Report Error - rsProcessingAborted

I encountered this error in my project when trying to run CRM reports within CRM (including the default reports). In the reportservice logs it says:

Cannot create a connection to data source 'CRM'. ---> Microsoft.Crm.Reporting.DataExtensionShim.Common.ReportExecutionException: Immediate caller Domain\SqlService has insufficient privilege to run report as user S-1-5-21-1162093662-620106126-315576832-39399.

The CRM is installed on the application server and the SSRS is installed on different server. After futher investigation it turns out that it's caused by double hopping issue regarding the authentication and we just need to set the correct SPN on the machines.

setspn -a http/your-crm-server-name domain\crm-user 
setspn -a http/your-crm-server-name(FQDN) domain\crm-user

Other things to check to make sure your reports work:
1. Make sure your SRS connector has the same RollUp version as the CRM Server RollUp
2. In Reporting Service Configuration Manager, uncheck the 'Specify an Execution Account'
3. Browse to both SharedReports\5.0.xxxx\ and _MSCRM report folder and check the MSCRM_DataSource connection. The connection string should be empty,  DataSource Type should be Microsoft Dynamics CRM SQL, and the connection should be Credentials supplied by the user running the report (uncheck the Windows Credentials box)

---
To run the report from the report server Url, you might find that if you are using normal domain account for username/password you will get the following error:

An error has occurred during report processing (rsProcessingAborted) Cannot create a connection to data source ‘CRM.’ (rsErrorOpeningConnection) Guid should contain 32 digits with 4 dashes (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx).

This is because the Username should be 'systemuserid' and the Password should be 'organizationid'. You can get this by running the query against the CRM database:

SELECT fullname, systemuserid, organizationid FROM FilteredSystemUser

Hope this helps,
Andreas



Comments

  1. Ben FisherNovember 10, 2011 at 4:10 PM

    I had this problem, all I had to do was add the SQL Reporting Services execution account to the PrivUserGroup and PrivReportingGroup.

    ReplyDelete
    Replies
    1. AnonymousMarch 14, 2013 at 4:50 AM

      This is finally what worked for me too...I had the Sql Reporting Services Execution Account in the PrivReportingGroup but not the PrivUserGroup...once that was added we were good (it also needs permissions on the db too). Also, instead of FilteredSystemUser use SystemUserBase table.

      Delete
    2. AnonymousMay 30, 2013 at 5:33 AM

      You are awesome! I had to add the Network Service to those 2 groups and all is well.

      Delete
  2. AnonymousMarch 17, 2012 at 8:03 PM

    Thanks dude !!! this really helped me a lot .... I was getting the same problem but after doing the chages it worked fine for me....

    ReplyDelete
  3. PTOctober 2, 2012 at 11:49 PM

    When I run that command, I don't have any users listed, I know they are missing, do you know how to add them?

    ReplyDelete
    Replies
    1. AndreasOctober 23, 2012 at 9:55 PM

      Sorry which list? the spn list or the filteredsystemuser list?

      Delete
  4. AnonymousOctober 24, 2012 at 9:49 PM

    What is FQDN in the command above?

    ReplyDelete
    Replies
    1. AndreasNovember 6, 2012 at 10:42 AM

      Fully Qualified Domain Name of your server :)

      Delete
  5. AnonymousFebruary 2, 2013 at 12:51 AM

    Hi Andreas,

    What user should be used for crm-user? I would hope I don't have to set the SPN for every CRM user!

    Also, on which computers are the commands executed? On both the SRS server and CRM server?


    Thanks for your help!

    ReplyDelete
  6. AnonymousFebruary 9, 2013 at 7:52 AM

    the only i had to do is --> 2. In Reporting Service Configuration Manager, uncheck the 'Specify an Execution Account' WORKS GREAT THNX

    ReplyDelete
  7. Villa KunayalaMay 15, 2014 at 8:36 AM

    Hi Andreas,

    Great article. I followed all your suggestions, however in our case we keep getting below error.

    Microsoft.ReportingServices.ReportProcessing.ReportProcessingException: Cannot create a connection to data source 'CRM'. ---> Microsoft.Crm.Reporting.DataExtensionShim.Common.ReportExecutionException: Caller S-1-5-21-812446608-132657156-1731110561-1114 has insufficient privilege to run report as user 704f896c-1c2b-e311-9405-001dd8b71c24

    User "704f896c-1c2b-e311-9405-001dd8b71c24" is the systemuserid I pulled out from the database using your SQL Query to retrieve Username and Password (Organisationid) details to run the report from report server directly.

    What are we missing here?

    Thanks,
    Rafa

    ReplyDelete
    Replies
    1. AndreasMay 16, 2014 at 2:37 PM

      Hey Rafa,

      Couple of things to check is in this article:
      http://community.dynamics.com/crm/b/crminogic/archive/2012/05/29/solutions-to-issues-with-reports-in-dynamics-crm-2011.aspx

      also check if your report is available to Organization level? (in Report Edit settings)

      Delete

Post a Comment

Popular posts from this blog

SharePoint 2013 anonymous access add attachments to list item

Image
Hi, Sometimes you want to enable anonymous access to be able to add a list item but at the same time attaching some documents. After good few hours playing around trying to make this work, turns out that we can achieve this functionality. The trick is to use RunWithElevatedPrivileges method for the file upload. We also want the file upload functionality to be available on the NewForm.aspx as it wouldn't make sense to put it in other forms as any user would be able to upload files to other records. The result will be something like this: When it is saved, the user is redirected to the display form: The close button then will take the user back to the homepage (or any page you desire) The steps: 1. Create an ascx control to host your file upload control in your project.  Put the below script in the ascx as well (credit to this post ): The code behind: 2. Create custom form template. You have to put the ascx in the CONTROLTEMPLATES folder of the
Read more

Sitecore custom publish agent from specific node and at a specific time

Hi all, As you all know, scheduled publishing will not run automatically unless you enable PublishAgent task in Sitecore config. By default, all items that are in publish queue will get published when this task triggers. This includes all items in the final workflow state and all items that don't have workflows. Sometimes this is not what you want. Maybe you don't enable workflow on media items and you don't want the items to go live when they are not ready. The workaround is to create your own PublishAgent task. Looking at the one provided, we can easily extend the code to insert the RootItem to the PublishOptions (this only works with Full or Smart publish mode however): You will notice that on the Run method I check whether the server time is around the time I set in the parameter (thanks to this post for the code). This will enable us to run the task near the specific time we set (e.g. midnight). In the config patch, just add this to enable the custom agent
Read more

CRM Plugin - Parent and Child Pipeline

This concept tends to confuse people often - and I was no exception. I came across this problem when trying to create custom auto-numbering for one of my projects. Creating auto-number for Opportunity is easy. This is because the user creates opportunity straight from the home screen - thus the plugin runs on parent pipeline. However, it's a different story if you are dealing with Quote entity. Quote can be created in 2 ways, through the home screen OR the opportunity screen. If you create it from the latter, it will run on the child pipeline and you will find that your plugin will not work. Registering it as a child pipeline is easy, but CRM makes it harder since you can't use ICRMService. Instead, you have to create CRMService manually by using this piece of code: Not only that, with the child plugin you can't use Query expression to fetch other entities in your code unless you register it as ASYNCHRONOUS plugin. Mark Kovalcson in his blog found out that: A C
Read more