Read-only access can be assigned to managers for primary reports such as Children, Enrollment, Transactions, and Attendance.

To configure this:

Go to Settings and select Role Management from the dropdown.

Click on Set Permissions next to the desired role.

To grant read-only access for the Enrollment report, scroll to the Enrollment section and uncheck all feature permissions except the Enrollment menu.

Then scroll on top or bottom and click update. In the same way you can update rights for other reports also.