...
Access for read-only account can be further restricted using 'Device access tags'.
Please see this wiki article for more information: Device access tags.
None
Accounts with the 'None' role have no access to the application - they can not even log in.
...