Hi,
I am assuming your users are on a domain... One quick way is to make sure that in Active Directory, the Security Group called "Reporting Group" contains the group "Domain Users." Since all users are part of the domain, and therefore part
of the Domain Users Group, they are automatically part of the Reporting Group. Thus as soon as you create new users in CRM, they have all necessary permissions. I would also recommend adding "Domain Users" to the "SQLAccessGroup."
As far as I know, there is no reason to create users in SQL
Al