I'd like to allow our accountant to access the accounts to read reports.
Could someone please point out the groups I should add the accountant to
so they can view all reports - but not be able to update any data, add
transactions or otherwise change anything on the system.