Checking the collective experience. We are testing the upgrade from SCCM 2007 to 2012 SP1 for a large environment. The goal is to flatten the hierarchy, simplify administration, and reduce server costs. RBAC is crucial for limiting system and data access between organizations sharing the CAS.
Reporting is problematic. We are able to control access to reports/folders with RBAC, but collection limitations are missing from standard reports. By example: User A works for organization AA, With Role AAA and has visibility to 10 collections out of 500 on the CAS. This user can only access report in folders Based on Role and Scope. But when (s)he runs reports all 500 collections are available in report parameters and reports.
We reported the problem to Microsoft, after reviewing report source to find the how SID was passed into a function for collections. User id is always "Disabled" as input the function. This was reported as breakage to Microsoft Support. Support has indicated this "feature" is not part of SP1 and will be in a future release.
Anyone else experienced this problem with SCCM 2012 SP1 supplied "Stock" reports?
We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.
Hi All
Checking the collective experience. We are testing the upgrade from SCCM 2007 to 2012 SP1 for a large environment. The goal is to flatten the hierarchy, simplify administration, and reduce server costs. RBAC is crucial for limiting system and data access between organizations sharing the CAS.
Reporting is problematic. We are able to control access to reports/folders with RBAC, but collection limitations are missing from standard reports. By example: User A works for organization AA, With Role AAA and has visibility to 10 collections out of 500 on the CAS. This user can only access report in folders Based on Role and Scope. But when (s)he runs reports all 500 collections are available in report parameters and reports.
We reported the problem to Microsoft, after reviewing report source to find the how SID was passed into a function for collections. User id is always "Disabled" as input the function. This was reported as breakage to Microsoft Support. Support has indicated this "feature" is not part of SP1 and will be in a future release.
Anyone else experienced this problem with SCCM 2012 SP1 supplied "Stock" reports?
ScottyB
Share this post
Link to post
Share on other sites