You might be able to do this by having a web report that just gets the applicable fixlets from a particular baseline, but then use the web reports computer filter to select the particular tenant group.
What is the reasoning for this report? What is it going to be used for?
Having more info would make figuring something out easier.
It is going to be easier to list the computers per baseline component than it is to list the components per computer.
When we create our Change Management Record we attach the applicable patches from the baseline being used for the target group. As part of our Change Management Process those patches indicate what is being modified on the server and provide those for Technical Review. I could give you a screenshot of an excel report that is done manually today. Just let me know where to send that to.