A Profile has no access to edit user page and no access to Setup and Configuration.
Can I have a report on User object accessed by a User with no 'View Setup and Configuration' permission and without User edit permission?
They can not access the records on reports if the profile do not have access the object.
But I have an idea,
In this case they can see the list of report but they can not access the report.