As a new feature in 3.3 the RBAC roles will be broken out exposing Read only option for items in Tower. This is a guide on how it can be done through the API on versions prior to 3.3.
Ansible Tower < 3.3
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.