Report Server Error: "The request failed with HTTP status 401: Unauthorized" (4227098)

When attempting to configure and connect to Report Server, the following error appears: Report Server Error: The request failed with HTTP status 401: Unauthorized.

There may be two causes for this error.

1. The Password Manager Account may not have the correct permissions to access the Reporting Services Server (i.e. Content Creator rights on the SRS Reporting side).
2. In complex network environments Windows Integrated Security may fail to authorize the user (client) on the Reporting Services Server because the authorization request is transferred through Password Manager server with impersonated credentials. This case is known as a double-hop issue.  A double-hop issue occurs when the SQL Database and the SQL Reporting Services are on two different servers.

To determine if the Password Manager Account has the correct permissions:

1. Log directly onto the SQL Reporting Services server as the Quest Password Manager account
2. Open Internet Explorer and navigate to http://<servername>/Reports
3. Click Quest Password Manager
4. Click 4
5. Click 01. Profiles states (table)
6. If the Report runs, permissions are Ok
7. If the Report fails to run there may be a  permissions issue or a double-hop issue.

To determine if a double-hop issue is occurring, try the following:

1. Log directly onto the QPM server as the Password Manager Service account
2. Launch Internet Explorer and go to http://srs_server/Reports (default location of Reports)
3. Attempt to run the same report that generated the HTTP 401 error
4. If the HTTP 401 error still exists then this is likely a permissions issue
5. If the HTTP 401 error no longer exists, this is most likely a double-hop issue

To resolve the Password Manager account permission issue on the SQL Server Reporting Services server:

Ensure the Password Manager account is a member of Domain Admins, is a local admin on the SSRS server and has a minimum of Content Manager rights within SQL Server Reporting Services

To check SQL Server Reporting Services permissions do the following:

1. Navigate to http://<srs_server>/Reports (default location of Reports)
2. Click Properties
3. Ensure BUILTIN\Administrators has Content Manager Role

To resolve the double-hop authorization issue in Password Manager:

1. Open Password Manager Administration site and click the Reports button
2. Click Connect to existing Report Server
3. Specify a Reporting Services Server name
4. Select the Specified user name and password option
5. Enter the name and the password of the Password Manager Service account. The user name must be specified as <DomainName>\<UserName>
6. Click Save