SQL Server Reporting Services - Kettle Reports
Anyone with access to Kettle Worker can access the Kettle Reports on the SSRS servers;
The only constraint is they have to be on the network, or VPN, and they need to use IE for it to work right.
Users can also be granted access to Kettle Reports without first having access to Kettle Worker, useful for HQ personnel, by placing the users in the “USWACLQ_Kettle Reports” group.
The workaround for those who cannot access the SSRS environment directly, because they are not on the network, and do not have a VPN (or DAC), is to put them in the AD group to which SSRS is published through Citrix; “USWXen_Reporting Services”.