Can I create a separate user for ready-only access to the database?

I need read-only access for an external/third-party service. Would I be able to create a separate read-only user for the database? If so, how would I do that? Thanks!