All permission report.view unless noted.

Method & PathFeature gatePurpose
GET reports/trial-balance—Debit/credit totals per account
GET reports/general-ledger—Chronological postings, optionally filtered to one account
GET reports/aging/{kind} (invoice|bill)—AR/AP aging buckets
GET reports/income-statement—Profit & loss
GET reports/balance-sheet—Balance sheet as-of a date
GET reports/tax-summary—Output/input tax by rate
GET reports/cash-flow—Indirect-method cash flow statement
GET reports/statement-of-account—Per-customer statement (not a tax document)
GET reports/books/{book}feature:books_of_accounts,strictStatutory books (journal/ledger/sales/purchase/cash books)
GET reports/books/{book}/exportfeature:books_of_accounts,strictExport a statutory book
GET reports/audit-trail—Sequential CAS audit trail
GET reports/audit-trail/export—Export audit trail
GET reports/{type}/export—Export any report as PDF/CSV/XLSX/DOCX (type whitelisted server-side)

strict feature-gate mode is used specifically for books-of-accounts because those are derived reports with no stored record of their own to fall back to read-only — an unentitled tenant gets no access at all, not a read-only view.