by default, every user group with "web service access" has full admin rights on the selected report suites. there is no way to reduce the permissions to "read-only" on report suite settings.improvement:the "web service access" should only trigger, if a user group is allowed to use the API credential...