Looking for the same capability. We have implemented custom roles, security rules to restrict users by BU. But this doesn't work for custom reports.