We need to add a user type that is Read Only access only.
At the moment, even a Basic user role can send invoices for example, so, like in the Connect KB, the ability to select areas of KashFlow, and more granular capabilities would be great, so user can read only and run reports, or print documents without risk of sending, editing etc...