[NEXUS-6825] Make external users read-only