In Order to give users read access to the mentioned apps or rather model objects, i would suggest to create a new group. You need to activate the developer mode and then you will find the "groups" in the "User & Companies" menu in the settings app.

When creating a new group (or maybe copy an exisitng group and adapt it to your needs), you have to assign read access to the desired models/objects.
Finally add the users to the Users tab. Refresh and check it out. Keep in mind, that this can create some dependency issues related to other apps. So defining the access rights can be quite tricky from time to time.