You should be able to create an Analytics permission group that contains the permissions you'd like (all reports access, web services, ect..), then map that group to a product configuration in the Adobe Admin Console. I recently wrote a knowledge base article on mapping permissions groups here. This article uses DTM as the example, but Analytics is very similar.
Once you've successfully setup and mapped a product configuration, you should be able to add users to that configuration. After accepting the invitation, the user should be able to log into Analytics successfully.
Thanks Jantzen, I followed your guide and was able to set this up. How confusing??
Thanks for the feedback. I'll be sure to pass it along to our enterprise development team. Unfortunately, merging user and permissions management from many complex solutions into a single interface can be complicated. Fortunately, our teams are up for the task and are hard at work making progress with each release.