You are only able to configure the CUR for the master account.
If you try to configure the CUR on a non-master account you will see the "Please update the policy to include: cur:DescribeReportDefinitions" error even though the permission shows up in the IAM policy.