Hi Shindle,

Users can just be assigned the item level security, e.g. Browser role. Obviously they need to be able to navigate to the item so need Browser on the folders below. The System roles are purely administrative.

Subscriptions create SQL Agent jobs. In order for SSRS to create and run these you need to make sure the user SSRS is running as has assigned the RSExec and SQLAgent Operater, User and Reader roles on MSDB.

Probably also needs RSExec on Master and db_owner and RSExec on ReportServer and ReportServerTempDB.

Hope this helps.