adding a "View only" user?

Hey guys, i manage the Proxmox in my company.
i want a user that will allow people to log on to the machines (we're using spice) and use them - thats it, they shouldnt have teh ability to start/stop/clone/create/remove machines.

But i can't seem to find the correct privilege level for that.

help please?