To demonstrate that you can manage using groups, instead of individual users, let's create a read-only user group and add the new user to the group:

You can select the users when creating the group: