The IAM section does not currently allow to grant read-only access to the flexsave panel and it seems that one must grant "pay invoice" privileges. Instead, it should be possible to grant access to members "view" privileges both for flexsave and invoices.
