I have played around with various roles from the System Security Menu and Access Rights for particular processes and am not getting the desired result. I have asked the LF 12 documentation AI bot and received an incorrect reply.

The need is to grant two employees the ability to do nothing in Forms except to run Reports for a few different business processes, I would like to prevent them from having the ability to even see the Monitor menu, or if they do, for it to provide them with no Instances there, even for the processes for which they can run reports. Both have access to forms from LFDS and are "Basic Users" in Security and are "Business Managers" in Access Rights for the processes they need to run reports for. When they sign in to Forms, they can run reports but can also interact with the instances via the Monitor menu. What combination of settings will achieve the desired result?