diff --git a/client/src/core/client/admin/App/Main.tsx b/client/src/core/client/admin/App/Main.tsx
index 1108c0af89..f4114d2fa0 100644
--- a/client/src/core/client/admin/App/Main.tsx
+++ b/client/src/core/client/admin/App/Main.tsx
@@ -18,17 +18,18 @@ import styles from "./Main.css";
 interface Props {
   viewer: PropTypesOf<typeof UserMenuContainer>["viewer"] &
     PropTypesOf<typeof NavigationContainer>["viewer"];
+  settings: PropTypesOf<typeof NavigationContainer>["settings"];
   children: React.ReactNode;
 }
 
-const Main: FunctionComponent<Props> = ({ children, viewer }) => (
+const Main: FunctionComponent<Props> = ({ children, viewer, settings }) => (
   <div className={styles.root}>
     <AppBar gutterBegin gutterEnd>
       <Begin itemGutter="double">
         <div className={styles.logoContainer}>
           <LogoHorizontal />
         </div>
-        <NavigationContainer viewer={viewer} />
+        <NavigationContainer viewer={viewer} settings={settings} />
       </Begin>
       <End>
         <DecisionHistoryButton />
diff --git a/client/src/core/client/admin/App/MainRoute.tsx b/client/src/core/client/admin/App/MainRoute.tsx
index a4a3002e5a..f9c255f3e4 100644
--- a/client/src/core/client/admin/App/MainRoute.tsx
+++ b/client/src/core/client/admin/App/MainRoute.tsx
@@ -20,7 +20,12 @@ const MainRoute: React.FunctionComponent<Props> = (props) => {
   return (
     <>
       {ErrorReporterSetUser}
-      <Main viewer={props.data && props.data.viewer}>{props.children}</Main>
+      <Main
+        viewer={props.data && props.data.viewer}
+        settings={props.data && props.data.settings}
+      >
+        {props.children}
+      </Main>
     </>
   );
 };
@@ -33,6 +38,9 @@ const enhanced = withRouteConfig<Props>({
         ...UserMenuContainer_viewer
         ...NavigationContainer_viewer
       }
+      settings {
+        ...NavigationContainer_settings
+      }
     }
   `,
 })(MainRoute);
diff --git a/client/src/core/client/admin/App/Navigation/Navigation.tsx b/client/src/core/client/admin/App/Navigation/Navigation.tsx
index ae36ac3928..852cd9878c 100644
--- a/client/src/core/client/admin/App/Navigation/Navigation.tsx
+++ b/client/src/core/client/admin/App/Navigation/Navigation.tsx
@@ -32,7 +32,6 @@ const Navigation: FunctionComponent<Props> = (props) => (
         <NavigationLink to="/admin/dashboard">Dashboard</NavigationLink>
       </Localized>
     )}
-    {/* TODO: Any other permissions needed? */}
     {props.showReports && (
       <Localized id="navigation-reports">
         <NavigationLink to="/admin/reports">DSA Reports</NavigationLink>
diff --git a/client/src/core/client/admin/App/Navigation/NavigationContainer.tsx b/client/src/core/client/admin/App/Navigation/NavigationContainer.tsx
index 3efcdd26c8..8141bb8621 100644
--- a/client/src/core/client/admin/App/Navigation/NavigationContainer.tsx
+++ b/client/src/core/client/admin/App/Navigation/NavigationContainer.tsx
@@ -2,12 +2,14 @@ import React, { FunctionComponent } from "react";
 import { graphql } from "react-relay";
 
 import { Ability, can } from "coral-admin/permissions/tenant";
+import { GQLUSER_ROLE } from "coral-common/client/src/core/client/framework/schema/__generated__/types";
 import { useLocal, withFragmentContainer } from "coral-framework/lib/relay";
 import {
   SignOutMutation,
   withSignOutMutation,
 } from "coral-framework/mutations";
 
+import { NavigationContainer_settings as SettingsData } from "coral-admin/__generated__/NavigationContainer_settings.graphql";
 import { NavigationContainer_viewer as ViewerData } from "coral-admin/__generated__/NavigationContainer_viewer.graphql";
 import { NavigationContainerLocal } from "coral-admin/__generated__/NavigationContainerLocal.graphql";
 
@@ -16,9 +18,13 @@ import Navigation from "./Navigation";
 interface Props {
   signOut: SignOutMutation;
   viewer: ViewerData | null;
+  settings: SettingsData | null;
 }
 
-const NavigationContainer: FunctionComponent<Props> = ({ viewer }) => {
+const NavigationContainer: FunctionComponent<Props> = ({
+  viewer,
+  settings,
+}) => {
   const [{ dsaFeaturesEnabled }] = useLocal<NavigationContainerLocal>(
     graphql`
       fragment NavigationContainerLocal on Local {
@@ -30,7 +36,19 @@ const NavigationContainer: FunctionComponent<Props> = ({ viewer }) => {
     <Navigation
       showDashboard={!!viewer && can(viewer, Ability.VIEW_STATISTICS)}
       showConfigure={!!viewer && can(viewer, Ability.CHANGE_CONFIGURATION)}
-      showReports={!!dsaFeaturesEnabled}
+      showReports={
+        !!dsaFeaturesEnabled &&
+        !!viewer &&
+        can(viewer, Ability.MODERATE_DSA_REPORTS) &&
+        // Exclude single-site moderators
+        !(
+          settings?.multisite &&
+          viewer.role === GQLUSER_ROLE.MODERATOR &&
+          viewer.moderationScopes &&
+          viewer.moderationScopes.sites &&
+          viewer.moderationScopes.sites.length === 1
+        )
+      }
     />
   );
 };
@@ -40,6 +58,16 @@ const enhanced = withSignOutMutation(
     viewer: graphql`
       fragment NavigationContainer_viewer on User {
         role
+        moderationScopes {
+          sites {
+            id
+          }
+        }
+      }
+    `,
+    settings: graphql`
+      fragment NavigationContainer_settings on Settings {
+        multisite
       }
     `,
   })(NavigationContainer)
diff --git a/client/src/core/client/admin/permissions/tenant.ts b/client/src/core/client/admin/permissions/tenant.ts
index a8a1d2a0d4..9be5b10d83 100644
--- a/client/src/core/client/admin/permissions/tenant.ts
+++ b/client/src/core/client/admin/permissions/tenant.ts
@@ -5,7 +5,8 @@ import { PermissionMap } from "./types";
 export type AbilityType =
   | "CHANGE_CONFIGURATION"
   | "INVITE_USERS"
-  | "VIEW_STATISTICS";
+  | "VIEW_STATISTICS"
+  | "MODERATE_DSA_REPORTS";
 interface PermissionContext {
   TODO: never;
 }
@@ -21,6 +22,10 @@ const permissionMap: PermissionMap<AbilityType, PermissionContext> = {
     [GQLUSER_ROLE.ADMIN]: () => true,
     [GQLUSER_ROLE.MODERATOR]: () => true,
   },
+  MODERATE_DSA_REPORTS: {
+    [GQLUSER_ROLE.ADMIN]: () => true,
+    [GQLUSER_ROLE.MODERATOR]: () => true,
+  },
 };
 
 export const Ability = mapValues(permissionMap, (_, key) => key) as {