LeadSight has an account Owner plus three website roles: Admin, Manager and Read-only. Roles are set per website and enforced on the server, not just hidden in the interface.
Owner has full control, including billing. Admin and Manager have progressively narrower access to settings and connections.
Read-only access is well suited to clients or stakeholders you want to give visibility to without letting them change anything.