user right or user policy to for just only reading any directory and file

Dear Sir/Madam,

I create this discussion is to get your support on how I can create user where the user only can read all files. User doesn't have permission to remove, create, rename, moving .... the files. It can only read the file content and can run some specific command such "df -kh", "ls -l","pwd",.....

Please kindly help to advise as i need to implement in my production server.

Thanks and regards,
Nan