Read only users

Read-only users are possible. You just need to set permitted actions to Read only.

It’s covered in this guide: Create users