Basic authorizations required to execute a Z program.

Hi

We have a separate user id defined for ITS users. Earlier this Userid had authorization SAP_ALL but this authorization was removed later. Can anybody tell me what all authorizations should I give to this userid so that it will allow user to execute a Z report through ITS?

Is there any other authorization profile with limited authorizations.