Allow read only users to generate manifests

As per the usual get consumer access