There is a new read-only user type. It gives a user view-only access to your vendor database, with no ability to make changes.

Useful for finance reviewers, auditors, and anyone who needs visibility without edit rights.