Read only access

We need the ability to have a true read only access role for offsite users. We have providers offices and agencies who need to print out records or review data in the system. They should be able to see the data, but never chart or change it. There is no way to fully lock down each icon to a read only access, some but not all. For example, allergies, in read only access, you cant add an allergy, but you can delete one or select NKDA and erase all the ones entered.