Best Practices for giving non-root users read access to root only logs?

If you're going to say give them less/vi/vim access using the sudoers file, then please don't bother, it's the wrong answer (in my opinion). grep, tail or cat is a little better, but I am hoping someone can illuminate me with an awesome solution for how to allow non root-access users to be able to read /var/log/* without making major system changes or using insecure sudoers configurations. It may be that tail /var/log/* is the best solution. How do you all handle it?