Setting permissions

I'm trying to setup a group for our support team that will allow them to deploy jobs and tasks without allowing then to modify them. Also the need to be able to read and modify reports.

Can someone point me in the right direction please?

It seems that if I lockdown their ability to edit jobs and tasks they can't edit reports.

However when I set them up to edit reports the have the ability to edit jobs and tasks.

I'm in a loop somewhere.

TIA!