Reports and Analytics security role to run report but can't edit DM

Summary

Looking for a security role to run BI reports but no ability to edit Data Model

Content

We assigned the BI Administrator Role to everyone and sometimes user move the report folder unintentionally.  This has caused us grief several times.  Is there a security role that permits users to run reports but not able to do anything else like update the Data Model or move the report folder?  

 

Thanks,

Joji