Object level security:


CRUD (Create, Read, Update, Delete) permission.

Field level security:

• Read Only
• Hidden

If object level security is just read, you can make any field of that object to hidden.
If object level security is CRUD, you can make any field of that object to Read Only or Hidden.

Cheers!!!