各権限を細かく設定することもできますが、一旦はビルドインロールを用いて、フォルダはAutomation User、テナントはAllow to be Automation Userのロールで良いのではと思います。
上記で権限つきすぎているようなら、そこから不要な権限を削除すればよいかと思います。
例えば実行権限を持たせたくなければJobのCreateとかEditを外すとかでしょうか。
Yes, to view to orchestrator job screen, user doesn’t need a license.
If you add that user to the orchestrator and provide the right minimum set of permissions, and also add the user to the folder where job would run so user is able to navigate to the jobs section and view the job. There are many predefined roles available in orchestrator, you can pick what suits you best and customize the same or you can consider making a brand new role yourself.
However, if your only requirement is to apprise the user of the status/summary of the job run, I would agree with @minami as better alternative would be to send summary emails to the user after the process run.