Create a Token for Read-Only Operation

There is no UI for creating custom roles. You can do it via API, as described here.