Grant global read-only access to users across all modules with one click
Create restrictions for administrator user to prevent change on specific groups if he/she is not in these groups.