You would need to disable and make a copy of the default security rule "Stream". In the copy of the security rule you would need to adjust the default read access grant of all appobjects in streams that you can read.
In addition you would need to create new security rules that grants read right to the right users and user groups.
NB: it is best practice to never make changes in the Qlik Sense default security rules. You may disable and copy them, but should not change/delete them.