Adam is mostly correct. There is another Role that lets you see the Dashboard, Operational Administrator. Unfortunately, it will allow the user to perform other tasks as well. If you create a new profile you can see all the possible privileges that may be selected. None of them are related specifically to the dashboard. I tried creating a custom role using just one of Read privileges, figuring that if it showed the Dashboard it would be okay if it also allowed the user to read some settings, but not change them. That did not work, so your only option would be to create an Enhancement Request as an Idea in the PAM Community.