So I created a couple test users in my lab, an Auditor role and a Monitor role. Using the "Rules" section as an example, this is what the Monitor user has:
And if I log in as that user and try to access the Rules, I can't:
So then I logged in as the Auditor user, that has these permissions:
I can access rules, but I can't make changes to the rules or their states: