Is there a way to grant read only permissions to a tech? Essentially, we want to give the tech the following permissions.
Currently, I have the following permissions set (checked):
After a quick review and comparing vs. the permissions available in the product, what you report above as configured seems correct. If you have not already, I recommend logging in with that user and walking through a few scenarios to ensure it is behaving as you would like and expect.