F5 iControl - Read Only Setup

Hello! Trying to setup Solarwinds to be able to access iControl on our F5 but I want to restrict it to be read-only. I've had trouble finding how to do that. I've read a lot that you CAN do that.. but not a lot about how. We currently use Remote Auth and solarwinds has an account built, but i'm not sure what permissions i need to set for it. Does Audit work? Or something else?

Thanks!