Who Me Too'd this topic

Hello, I hope everyone is staying healthy.

I work at a company that provides ISP services to public schools, each school district is divided in to separate security zones on our Palo and I am trying to see if a read-only user can be created that is able to only look at security and NAT rules for their assigned zone.  I've been fiddling around in the OS and searching online but haven't been able to find any information to answer this.  I know they can be setup to view all rules but I was hoping to narrow that down if possible.  We are running on the latest OS 10.0.3.  Thank you for any information you're able to provide.