It would be helpful to have a read-only user role for users who would like access to Marketo to view campaigns and reports but not have access to edit/create assets. This would provide control to admins/trained users and minimize errors like running a flow step or changing activated campaigns.