Add ROLE_USER (read only mode)