Providing read only access to production business hosts

Hi,

I want to restrict user for any modification in the business host settings while testing the production. How can I achieve the desire ?

Thanks