I would like to create another Accounting group which is exactly the same as the Accounting/Billing group only that the users will not be able to modify invoices and credit notes (only view them). I believe I need to duplicate the Accounting/Billing group and then only tick the read access for "account.move" (journal entry) in the access rights tab.

I tried this and all the users that were in the Accounting/Billing group automatically moved to the new group. The new group also could not see the Dashboard and the Reporting Menus anymore