I'm trying to set up a read-only role in CiviCRM on Drupal. The environment is Drupal 8.9.12, CiviCRM 5.32.2 on Centos 8 with Apache. This is a brand new installation I'm setting up for an organization that I volunteer for. (I'm new to CiviCRM but have a long career with the IT industry and Linux in particular.) Right now I'm working on a test environment that I've set up for learning my way around.
I've created a role in Drupal and enabled a number of CiviCRM "view" permissions in this role. I've then created a used and assigned the newly created role to this user.
If I log in as this user I get "Access denied" for everything I've tried. If I now enable "CiviCRM: access CiviCRM backend and API" for this read only role, I can now see the CiviCRM pages but I also seem to ave the ability to edit, which I'm trying to prohibit.
This is all on a virgin install. I didn't encounter any problems installing the software, and if I log in as a user with adminitrator permissions everything works as expected, so there doesn't seem to be a problem with the install.