User Problem

In the current design, there is no way to customize a global role with the admin rights with read-only permission to integrations and heartbeats.
If grants the "Read-only" Admin rights in the custom role, although this user won't be able to update any existing integrations, but adding a new integration is still permitted.

Suggested Solutions

Please consider having this option available in the Custom Role.

Current Workarounds

1. Assign this person as a Global User from Settings >> Users.
2. Add this person to the wanted teams and create a specific team role at the path Teams >> Roles in those teams without permission to intervene in integrations.
3. Assign this new team role to this user at Teams >> Members.