SCCM Report Admin Security Role

Hi 

has any one created a custom secuirty group that allows a user to create custom reports on SCCM but not go ahead and start changing things like boundary groups?

I know the built in Full Administrator, Infrastructure Administrator can do this but I just want the user to be able to create custom reports only.