I'm asked occasionally for documentation on how to set up security in SSRS. Here's a primer on how to do this