A new marketing intern needs to open and read files in a shared folder that contains finalized campaign documents, but company policy states the intern must not be able to modify, delete, or add files. Following the principle of least privilege, which NTFS permission set should you assign to the intern's account for that folder?