How to allow access to webconsole for some parts of administrator which had access to Commcell

Hello All, 

Yesterday with one of my colleague we tried to configure some Reports from daily backup on email. The fastest way is login to webconsole. My colleague has some access to CommCell, but from site of webconsole, when he tried to login, the popup window inform us that the user or password is not corrected. 

I wonder what type of security access should be granted to the user to: 

1. Have access to webconsole. 
2. Have possibility to create proper report.

Regards, 

Michal