As of right now, you need to grant a role access to modify enrollments in order to Manage Tasks in the task report. It would be great if managing tasks was a separate checkbox within a role as we only need certain roles to check off on outside tasks, but should not be able to modify enrollments.