Read-only donation reports without other report menus

For GiveCampus accounts and administrator access.

Reporting Admin can download donation reports across forms/campaigns without the report-settings permission that creates/edits custom reports, but it also includes other reporting capabilities. It is not a single-custom-report-only role that hides every other reporting menu. Review the available predefined roles and their complete capabilities with an authorized administrator; individual permissions within those roles cannot be customized. Do not grant campaign/form/admin editing to solve report access or promise a per-report access-control list not exposed by the standard policy.