Figure 2. Assign New Roles
Type the fully qualified name of the TFS Users group into the "Group or user name" box, then check the Browser and the Report Builder checkboxes. The Browser role lets you view a TFS report, and the Report Builder role lets you modify the report definition and report parameters.