Read-only user role with access to read everything

We need a new user role that has access to read everything in Workfront but cannot update anything. This is similar to the system admin user except that this user cannot edit anything. This is needed for our system integrations with Workfront. It's possible to also use this for executive managers who only need a read-only view of Workfront.