we do plan to add another user role of "network user", which will have read-only, except for their own machines, but again this is road mapped and may be a couple of months