Hello!
I'm trying to configure role for view-only guest accounts that need access to view VMs configuration and console, but should not be able to change anything nor input something to console.
I've created role with VM.Audit, VM.Console and VM.Monitor privileges, which kind of does the trick...