We have an outside accountant-type person who interacts with our data - but only in the sense of reported data. We would like to give them access to the Billing Management system, but without permissions to make changes in the system. Billing Clerk, for example, gives more permissions than we want.

It would be very useful it there was a role or a way to build a role that would have effectively read-only access?