Right now you can control user access to specific projects or tools, but those users get full edit access to the tools they have access to.
It would be great if there was a 'view-only or read-only' option so we could give view access to the users without letting them edit any of the data.