You manage a Fabric workspace that contains a lakehouse with sensitive financial data. A group of business analysts needs to query the lakehouse SQL analytics endpoint and view existing reports, but they must not be able to modify the lakehouse, create new items, or run notebooks. You want to assign the least-privileged workspace role that meets these requirements. Which workspace role should you assign to the analysts group?