A typical security model for roles would be Administrator, Editor, and Viewer.
Administrator has read write permissions and can manage roles and users.
Editor has read write permissions.
Viewer has read only permissions.
It’s easy to set up the Viewer role in my app created with Radzen Studio, but how do limit a “Viewer” user to read-only?