I'm find the option in admin > spam
First enable the setting "Allow posts to be flagged" under Administrative tools → Spam. Then change the setting "Flagging posts" in Administrative tools → Permissions. You could set it to "Registered users," but I'd recommend at least "Registered users & email confirmed & enough points" with a sufficiently high points value to avoid abuse by new users.
Welcome to the Q&A site for Question2Answer.
If you have a question about Q2A, please ask here, in English.
To report a bug, please create a new issue on Github or ask a question here with the bug tag.
If you just want to try Q2A, please use the demo site.