I found a link describing the permission: Customize Report Access
if you replace the naming "user groups" (legacy admin) through "product profiles" (experience cloud admin) it is quite straight forward (despite some try and error to find the right screen)