CQL Report permission visibility