HR must see web clock entry but cannot modify it

Summary

Creation of a security where HR is able to see in : Time management > Time entries > all clock in & clock out from web clock device but cannot modifiy them

Content

Is it someone have met this requirement before ? and how do you manage this?

HR must have access to the information and the list of clock in & clock out from web clock, but cannot modify it into time management console.