Which data security policy is needed to create Read-Only role for Lease Accounting Module?

Hi team,

Customer requirement is to only view created lease by other user and the user with view only role cannot create new lease.

I have added view lease contract function security policy which is not a problem.

The problem is data security policy, where you have to add "Manage Lease Contract" to be able to search leases for target BU granted in data access. But at the same time, "Manage Lease Contract" make users able to create lease in target BU.

How can we create role which only allows users to view existing leases and not create new leases for target BU?