View access of HFM, FDMEE, and Shared Services to the Auditor with below requirements

We want to give only "VIEW" access to the Auditor , Also he must be able to extract provisioning report and Security audit report in HFM.  Considering below points :  FDMEE No Setup tab  ‘Data load rule’  “Batch/Report/Script execution”  “Metadata rule”. Only Read access for “Data load mapping” and Monitor Process details.    Share services No Write access for User /Group role assignments / updation . Give rights to Provision reports and Read access to Share services.    Journal No Period open/close. Only Read access to all Journal features    Report Access to all reports Task audit, Data audit, Security audit report ,User