What is the easiest way to create an admin-like role and a read-only role? Which standard role is the closest to Admin or has the most permissions?

Maybe CFO (hands off)? This is mostly read only

Thanks!