Creating a read-only account using FortiManager

Hi,

We have a fortimanager which connects to a fortigate. Whats the best way to create a read only account for the fortigate? Is there a way? 

If there's a best practices for this, happy to review it.

We have an ADOM in fortimanager which manages all the firewalls.

Thank you!

TIA :)