read-only access to users along with access to monitoring tab

Maria said:

looking to grant read-only access to users

Can you be more clear on this statement , Anyone who is part of Designer system group can have the access for Monitor tab and all other tabs present in Appian Designer. 

So other things like Security for Application or Process related Security you need to maintain on Application level .So if you don't want user to edit a Process instance maintain it in Process model security, Same with Applications

We need to create a new group users( support) .

We want to ensure they can monitor process instances, but they cannot modify objects, create objects or even create new apps on Production. Hence giving designer access to the group is not something we want to do. 

how could we achieve this?

We need to create a new group users( support) .

We want to ensure they can monitor process instances, but they cannot modify objects, create objects or even create new apps on Production. Hence giving designer access to the group is not something we want to do. 

how could we achieve this?

hi Maria  you can create a user support group. and you check this security role and map it that might help. 

 Developers must have at least Initiator permissions to processes to see them on this monitoring tab.

so creating this support group with initiator rights, it wont allow them to create objects correct?