In order to find out which web reports belong to which permission groups, the following T-SQL may be run to dicsover which roles will grant access to a report: 


DECLARE @reportTitle VARCHAR(MAX) = 'Debit Memo'
DECLARE @rptId varchar(MAX),@pGroup varchar(MAX)SELECT @rptId = rptID,@pGroup = paramGroup FROM [MnxReports] WHERE rptTitle LIKE '%'+ @reportTitle +'%'SELECT rptId,rptTitle,rptTitleLong,rptDescription FROM [MnxReports] WHERE rptId=@rptIdDECLARE @rTags varchar(10)SELECT @rTags=fksTagId FROM [MnxReportTags] WHERE [rptId]=@rptIdSELECT RoleName FROM [aspnet_Roles] WHERE roleId IN (SELECT fkRoleId FROM [aspmnx_RoleSystemTags] WHERE fksTagId=@rTags)
Simply change the 'Debit Memo' to the title of the report you want.