In the Admin section, "Users & Roles". Users will pop up, but next to it you will see the Roles tab; click that. You can view all the roles there. I'm assuming you have not created any new ones so what you see will be what comes out of the box. If you click on the View-Only role, then Edit Role at the top, you will see exactly what permissions the Role gives.
To export reports, you will go under Access Analytics. This profile will give them the ability to view Leads, but do nothing else.
I would encourage you to look around some, see if any custom Roles make sense.
Hope that helps!