CFY-606 give read only permissions to windows agent on manager machine