For the ACS reports the permissions have to be configured in SCOM.
Click Administration–User Roles
If you do not have a role created. Create a new role called “ACS report viewers”
In the tab that opens add the groups in your AD or users in your AD that you would like to have permissions to view reports.