Thanks for the answer. On the permission page, I already set everything to registered users with email confirmed or higher. However I don't see the "View question page" in the list of permissions.
I think I will manually create all users and after that tick "Temporarily suspend new user registrations", in that way I can prevent uninvited users joining the platform.