Hi Webrunner,

I like your joke about SQL Server Query in a bar.

As you say you have 20 to 30 users and probably guessing no more than 5 people will run reports at the same time, no need to separate anything. Yes, you will need extra licensing for scaled out deployment and you will need extra servers for SSRS web and SSRS DB and also check SQL Server editions that allow distributed deployment. You may be running a lower edition.

Performance consideration: depends on SQL load and Network load, what is busier.

Security Consideration: if all your 30 users are inside the company FW and you set up SSRS permissions correctly and your SQL Server is secured, and the server is not exposed to Internet or DMZ, i think you will be OK (the disclamer here- not responsible if something happens...)