Read only user for ASDM

[disturbedone]

I'd like to create a user for our helpdesk so they can logon to ASDM and view the 'Home' page where they can see things like the interface (Internet) usage etc.

I created a user with the following settings:
Full (ASDM, SSH, Telnet and Console)
Privilege Level: 2

This was done because the other non-Full options don't give ASDM access and Level 2 is the bare minimum foR ASDM access.

However this user can still modify firewall access rules. How can I stop this and make it purely read-only?

 

[disturbedone]

*bump