Role Based Access in NPM & SAM

Hello ...

I want to create role based access to users, so basically need on group with only capabilities to do discovery only no other management capabilities, how can I achieve this ?

Any help appreciated.

Thanks