Which essential capabilities should I assign a basic role in my Splunk APP?

[PhoebeOh]

Hi,

I just created an APP in Splunk Cloud and I'd like to create a new read-only role accordingly, which contains capabilities as less as possible.
I hope users of this role can only read in-app dashboards. Neither editing searches nor changing settings is welcomed.
Which capabilities should I add to it ?

Please help and many thanks!

[SanjayReddy]

Hi @PhoebeOh 

My point of view, user role is best sutable for your requirement. which comes by dafault , you no need to create new role.