How to create a read only AX account

We have consultant who need access almost any resource in our AX 2012, i do not want to give him any chance to modify. How can i create a read only user account? Thanks for help in front.