1 of 1 people found this helpful
There are many feature requests for better node admin granularity, but some of what you want can be achieved now, except as you guessed no.3 on your list.
1. Admin account
2. Allow Node Management Rights, but remove Allow Administrator Rights
3. Not possible, without two accounts (guest type account for R/O and customer account for R/W)
4. Check the Guest account, read only everything.
5. Our customer nodes exist in customer groups, so for customer accounts we set the ACCOUNT LIMITATIONS to Single Group of the customer. We then created customer reporting and alerting categories, again limited to each customer.
We also created specific customer views, for their landing page, when they log into Orion.
Some reading from the customer to get you going:
I hope it helps