Using AWS Appsync with Amplify, how to assign read-only permission for authenticated users?

Question

I\'m learning Amplify by building a web app (marketplace).

Buyers place orders and sellers see their sales when they sign in to their account.

I can do a simple Gr