Feature request:
Would you consider moving the reports a non-admin path, and managing access via a new ..._allowed_groups setting? :))
access_reports_allowed_groups:
default: "1|2" # auto groups admins, moderators
mandatory_values: "1|2" # auto group admins, moderators
type: group_list
allow_any: false