I need to create a role and then some users that have just the grant to navigate and display reports in the web browser.
Nothing else is allowed.
Which Profile/System Authorization have I to define?
I tried some but without success.
In the 'old' reports they need Server.Read on the servers you want them to see inventory and Job.Read / Component.Read / Template.Read for Job results
there is no way to prevent them from logging into the CM GUI (if they install the app), but they will still only have read access.
I think w/ BSARA there is better support for what you want.