Is it possible via a query, specific to 'SSRS' (SQL Server Reporting Services) to get an inventory of all reports on the server, e.g. name, folder, creation date, and which users have permissions to run/view those reports, this is for MSSQL SSRS in version 2016. This is a new task but as some of the reports are drawing sensitive records from the underlying data sources, we need assurance that access is appropriately restricted, and an inventory and corresponding access list would be an excellent start point.
This of course (possibly incorrectly) assumes all SSRS report/report folder access permissions settings is actually stored in a system databases, and the software doesnt integrate with the local OS security groups or indeed even domain groups for controlling access to SSRS reports. My guess is the permissions info will still be stored within a particular system database table(s), and access control entries will be a combination of MSSQL authentication, local OS group members, and domain security groups.
It would also be interesting to learn how often these reports are being accessed, to identify any unused stale reports that no longer serve a purpose to the organisation.