The existing capability (moodle/site:viewreports) allows to set the right to view the whole activity report page. With parts of the page could be a problem with restrictive data protection policies within institution. To meet special needs concerning the access to log and personal data should be implemented separate options to switch on/off parts of this page (course/report.php). This could be done based on the role definitions as a new capability:

1) Show menu to choose, which logs you want to see
moodle/site:chooselogs
moodle/viewreports:logs

The attached screenshot illustrates the part, which should be hidden, when the capability is not set (No. 1)

• Pls. note, that there are connected issues (No. 1-5)