How to Create a Permission List Giving Read-Only Access to All Pages

In earlier versions of the system (8.0 and earlier) PeopleSoft delivered a permission list for "ALLPNLS" which gives user ability to access any page in the system.  In later versions this was removed and instead Oracle/PeopleSoft delivers a hidden role called "PeopleSoft Administrator."  Previously customers could clone ALLPNLS and then modify it to be read only (or remove access to some pages).  Now this cannot be done because the PeopleSoft Administrator role is hidden.  Auditors have required that people working in IT department must have only have read-only access to data in production.  Since ALLPNLS is no longer available, and