You can create user groups and give permissions to specific apps. Permissions are either "view" or "edit". If given "view" permission, the user will not be able to make changes to the application.