To create a read only user in CRM –
1. Create a new Business Unit “Read Only” with root BU as the parent BU
2. Create a new Security role “Read Only” with only Read permissions on all the entities in the system.
3. Assign the Read Only role to “Read Only” team.
4. Change the BU of the Read Only user to “Read Only” BU.
Hope it helps.