Is there an option to create read-only user on a SPE box? I dont see any option to choose user rights.
Check this out and see if it helps:
https://support.symantec.com/en_US/article.HOWTO79771.html
Thanks!