Can I create a read-only user who can see everything but not make changes?
Yes - that's exactly what the Observer role is built for! Observers can view, upload, and download invoices and reports, but can't approve or edit anything. Perfect for area managers or any team member who want visibility without the risk of accidental changes.