Both SharePoint Online (including OneDrive for Business) and Exchange Online allow a read only mode to be implemented. When this is enabled documents can be viewed in the browser only and not downloaded.
Create a new OwaMailboxPolicy and set the ConditionalAccessPolicy setting. Once that is done you may apply the same policy to the selected users.