Fixes #17185: Read-only access via soap api should be available to VIEWER level.