If an user is part of the Discover & "All report access" group, he/she does not have access to Discover. The user needs to be part of any non-predefined group with RS access.
Would be great to allow "All report access" to have full access to Discover too.