Locked Users Report - custom role and bursting

Summary

Can we make a custom role with access to run the Locked Users Report? Can we do email bursting of the output?

Content

We have two needs around the Locked Users report.

1) We are creating a custom role for user provisioning that has a much more limited view of the Security Console--full access to the Users tab, read-only access to the Roles tab, and no visibility to the rest of the tabs.  We want the people who have this custom role to be able to run the Locked Users report.  Is there any privilege from the IT Security Manager role that I can put into the custom role to give this access?  Or will I have to copy IT Security Manager and remove all of the functions we don't want them