Your network contains an Active Directory domain named contoso.com.
You install the Windows Server Update Services server role on a member server named Server1. Server1 runs Windows Server 2016.
You need to ensure that a user named User1 can perform the following tasks:
View the Windows Server Update Services (WSUS) configuration.

Generate WSUS update reports.

The solution must use the principle of least privilege.
What should you do on Server1?