Your organization requires a way to allow users to have access to query datasets in BigQuery, ensuring they can perform all necessary read operations without granting them permissions that could lead to accidental deletion or modification of the datasets. According to Google-recommended practices, what should you do?