Hi,

To enable specific users to view sales orders, add log notes, and create activities without granting full editing rights in Odoo, you can customize their access rights through user groups. First, create a new user group, such as "Sales Observer with Notes," and assign it to the "Sales" application. Within this group, set the "Sales Orders" access right to "Read Only," which allows users to view sales orders but prevents them from creating, editing, or deleting them.

To enable log notes and activity creation, you need to grant access to the related models, "Mail Messages" (mail.message) and "Activities" (mail.activity). Enable "Technical" features (which may require activating developer mode) and grant "Create" and "Write" access to these models. This allows users to add notes to sales orders and schedule activities related to them. Finally, assign the relevant users to the newly created "Sales Observer with Notes" group. This setup ensures that these users can view sales orders, add log notes, and schedule activities, but cannot make any other modifications to the sales orders themselves. Thorough testing is recommended to confirm the correct functionality and security of the configured access rights.

Hope it helps