Could you try giving the user read and view_index_metadata privileges on .kibana? That should give the user read-only access to the dashboard. Note, however, that UI elements to alter the dashboard will still be shown but they just won't function.
Cheers
Rashmi