What privileges provide read-only access to pending approvals in the transaction console (ERP)?

Content:

We're trying to control the access of specific admin users in the system. Part of the requirement is that they should be able to review items in the Transaction Console, but SHOULDN'T be able to action on them (no Withdraw / Reassign / Resend Notifications).

From our research, potential solutions include the following:

A. Create a custom role; and/or apply the profile option "FND_READ_ONLY_MODE" to the specified users.

‣‣‣ Removing whole roles would impact our other requirements. Hence, we opted to try removing specific privileges from existing roles instead. We've done so by modifying the seeded "Application Implementation Consultant" role and enabling "FND_READ_ONLY_MODE" on top of it. Below are what we found: