How to setup the folder security roles in SSRS

In SSRS new roles and adjustments to existing roles must be performed in SQL Server Management studio, SSMS. After opening up SSMS, click on "Connect" and select "Reporting Services…"

Enter your Server Name and login information and then click Connect.

After connecting to the Report Server, open the Security Folder right click on "Roles" and click on "New Role…"

I created 2 new roles ("Browser Group", "Functional Owner") with the same permission as "Browser".

Then on the report manager click on the down arrow for a folder and select "Security"

Then click "New Role Assignment"

Then enter the Active Directory group or an email address and check the new role you created.

You can then query the server for the permissions and show these in a report.

;WITH 
catalog_type_description
AS
(
	SELECT tbl.* FROM (VALUES
	  ( 1, 'Folder')
	, ( 2, 'Report')
	, ( 3, 'Resource')
	, ( 4, 'Linked Report')
	, ( 5, 'Data Source')
	, ( 6, 'Report Model')
	, ( 8, 'Shared Dataset')
	, ( 9, 'Report Part')
	) tbl ([TypeID], [TypeDescription]) 
	WHERE TypeID = 1
)
, 
nonreport_folders
AS
(
	SELECT tbl.* FROM (VALUES
	  ( 'Images')
	, ( 'SharedDataSets')
	, ( 'Data Sources')
	, ( '')
	) tbl ([FolderName]) 
)
, 
reporting_role_names -- added roles to the report server
AS
(
	SELECT tbl.* FROM (VALUES
	  ( 'Browser Group', 'DL', 'GG')
	, ( 'Functional Owner', NULL, NULL)
	) tbl ([RoleName], [RoleNamePrefix], [RoleNamePrefixReplace]) 
)
, 
user_list
AS
(
	SELECT 
		  usr.UserID
		, usr.UserName
		, UserNameFormat = 
			CASE 
				WHEN CHARINDEX('\', usr.UserName) > 0 THEN UPPER(SUBSTRING(usr.UserName ,CHARINDEX('\', usr.UserName) + 1, LEN(usr.UserName)))
				ELSE usr.UserName 
			END 
	FROM 
		dbo.Users usr
)
, 
reporting_roles
AS
(
	SELECT 
		  cat.Name
		, rol.RoleName
		, UserNameFormat =
			CASE 
				WHEN LEFT(usr.UserNameFormat, 2) = rpt.RoleNamePrefix THEN rpt.RoleNamePrefixReplace + SUBSTRING(usr.UserNameFormat, 3, LEN(usr.UserNameFormat))
				ELSE usr.UserNameFormat 
			END 
		, ReportingRoleName = rpt.RoleName
	FROM 
		dbo.[Catalog] cat
		INNER JOIN catalog_type_description tpd ON cat.[Type] = tpd.TypeID	
		LEFT JOIN dbo.PolicyUserRole urol ON urol.PolicyID = cat.PolicyID
		LEFT JOIN dbo.Roles rol ON urol.RoleID = rol.RoleID
		LEFT JOIN reporting_role_names rpt ON rpt.RoleName = rol.RoleName
		LEFT JOIN dbo.Policies pol ON urol.PolicyID = pol.PolicyID
		LEFT JOIN user_list usr ON urol.UserID = usr.UserID
		LEFT JOIN nonreport_folders nrf ON nrf.FolderName = cat.Name
	WHERE 
		1=1
		AND nrf.FolderName IS NULL
)
SELECT DISTINCT
	  FolderName = rpt.Name
	, rpt.RoleName
	, UserNameFormat = STUFF((SELECT '; ' + rol.UserNameFormat FROM reporting_roles rol WHERE rol.RoleName = rpt.RoleName AND rol.Name = rpt.Name FOR XML PATH('')),1,1,'')
	, ReportingRoleName
FROM 
	reporting_roles rpt
WHERE	
	1=1
	AND (
		CASE 
			WHEN @HideNonAccessGroups = 0 THEN 1
			ELSE 2
		END			
		) 
		<= 
		(
		CASE 
			WHEN ISNULL(ReportingRoleName, '') = '' THEN 1
			ELSE 2
		END
		)