How to create global-read only account in Confluence Data Center?

Question

For an app integration, I need a service account that can read all content within Confluence. This account does not need any write access.

I'm not seeing a clear way to do this without manually adding it to each space, which is not ideal, since space admins would be able to remove it if they didn't know what it was used for.

Is there any way to set something like this up?

Brant Schroeder · Answer

@Ashley Honeycutt you could create a group and add it to all the spaces.  Regardless you will have to add the user or the group to the spaces.  Often the confluence-user group is added to all spaces and you could add the user to that group.  The issue is it might have more than read only access.