The permissions available directly in the catalog enable running reports, scheduling reports, and viewing report output.

Therefore if your enterprise includes report consumers who have no other reason to access Publisher except to run and view reports, then the roles for these users consist of catalog permissions only.