MB-8806: Support Read-only Admin user

Change-Id: I22de077bb9feea8d2a06675c4f8df51e9f09f0fc