Sandy,
The new reporting access control feature and the Analyst security group are two separate features introduced with 13s. One is not dependant on the other. The data access control feature, if turned on, controls access to data in Analysis. Reporting users will only have access to data defined in the Upstream Project team tab. If the data access control feature is turned off, reporting users will have access to all data; no restrictions.
The Analyst group is a new security group which provides read-only reporting capabilities. The Analyst group does not support the copy command. If a user wants to add a report to their dashboard they simply need to add the report from either the Prepackaged Report or Public Reports folder. Not sure making a copy of the report makes sense considering the reporting user will not be allowed to edit and save the report.
Hope this helps. If you need further clarification feel free to reach out to me so we can schedule a quick call.
Appreciate you taking the time to post your question on Exchange.
Take care.
Manny Cortez
Ariba Analysis Product Manager