Add read-only user API backed by ES