Creating a security role that only has rights to run reports in NS7