You can get the user session info by services present in WmRoot or look into WMSESSION table.
Check IS administration guide for the extended setting and I think there is nothing as such for your use-case but give it a try.
Reg. the read access you can create a package similar to WmRoot but this package will only have read and list access on the all the options of IS exposed to the user who logs in to the home page of this package.
Yes there is nothing available out of box but you can indeed customize the IS Administrator portal to your own Dashboard type and assign the ACL;s to restrict the user access for some of the admin portal screens you want to give view (readOnly) access etc…
There might be one but I personally don’t suggest due to the facts below.
Not worth spending on such tools
You can easily create one by yourself as I have done one in the past for v8 and v9. Hopefully one soon for 10.x
Also my personal voice is that sag should provide these sort of utilities with their product suite as their pricing and licensing is way more than other tools in the market.