How can I tailor roles to enable report generation?