Looking to add a read-only role for techs in our department who are investigating some things but don't need (or want) to risk breaking stuff.

Is there a "standard" list of capabilities that can be added to a role that will give the ability to see stuff but not break stuff?

Thanks in advance,

Randy Rue