Best practice to control the folder permissions in Reports and Analytics

Content

We have the same requirement, or at least the same issue as described in this topic (https://cloudcustomerconnect.oracle.com/posts/b07532cb8d) , but prefer to make a new topic not to hijack the author's thread.

We have some Data Model reports containing compensation element entries, which can theoretically be viewed by anyone that knows how to get there (fortunately most personnel does not know and even less care to go and look for it).

We want to know how we can manage permissions based on roles and still properly limiting rights to all reports. I agree that maintaining it by user is not desirable.