I followed the steps from this article Jira Cloud - How to Create a Read Only Use
to create a read only user, created group & role & added role to the permission scheme (only to Browse Project). It worked but I discovered that a read only user was still able to create a project. I needed to change the global permissions which by default was set to public (meaning anyone was able to create a team managed project).
Is that right? Is there anything else I should disable before handing access to the read only user?
