Default Operator role - how to add the ability to manage reports?

I'm trying to configure access for a team so that they can not only create their own private/personal alerts, but also create their own reports. By default, the built-in Operators role doesn't seem to be able to be modified to add that, or any other rights (viewing the Deployment tab for example).

Is this an option and it's just not documented well enough for me to find it, or do we need to create an additional role with all the specific permissions/rights needed and assign the users to that instead?