Create custom role to files in UCM

I need the ability to view files in UCM, we have a report which runs via an ESS job but its erroring because users don't have the relevant privileges to access UCM. The report/ESS job needs the ability to read files stored in UCM.

The ESS job completes if users are granted the seeded BI Administrator role but this is not a viable solution as end users shoulndt/wont get access to this role in a Live environment. When I attempt to create a custom role by replicating the BI Administrator role strangely enough the report doesn't work. The 3 duty rules under the BI Administrator role are as follows,