You are an Azure administrator for Contoso. A new financial auditor needs to review the configuration and performance metrics of all virtual machines in the 'Production-RG' resource group. The auditor must NOT be able to start, stop, resize, or otherwise modify any resource. You want to grant access following the principle of least privilege using a built-in role. Which role should you assign at the 'Production-RG' scope?