You need to ensure that a user named User1 can perform …

Your network contains an Active Directory domain named contoso.com.
You install the Windows Server Update Services server role on a member server named Server1. Server1 runs
Windows Server 2016.
You need to ensure that a user named User1 can perform the following tasks:
-View the Windows Server Update Services (WSUS) configuration.
-Generate WSUS update reports.
The solution must use the principle of least privilege. What should you do on Server1?

A.
Run wsusutil.exe and specify the postinstall parameter.

B.
Add User1 to the WSUS Reporters local group

C.
Modify the permissions of the ReportWebService virtual folder from the WSUS Administration website.

D.
Add User1 to the WSUS Administrators local group.

Explanation:
WSUS Reporters have read only access to the WSUS database and configuration

When a user with “WSUS Reporters” membership, he can view configuration and generate reports as follow:-