Do I need to buy licenses for users that only need reporting access?

Yes, anyone who will be accessing tymeshift needs a license. It doesn’t matter which features they will be using.