But I don’t want this user to be an administrator, he is already a power user with almost 95% of permissions.

and he need to generate this report every week, so its not practical to let the administrator do this job on behalf of the poweruser.