Is there a privilege that will give us reporting access, but no access to BPM?

Summary:

We have a requirement from our client to create a role that provides access to Reporting to run queries on the database, but restricts access to BPM Workflow Rules editing.

Content (required):

We have a requirement from our client where we need to allow the users to have basic access to reporting, i.e., ability to write queries. But the same user should not get access to edit the BPM Workflows rules. We are unable to find the privilege that allows this combination. The issue we are facing is that all BI Roles that we are using for Reporting access is also giving us access to the BPM Workflow.