As a Application team I want to enable specific users only reader permission on the workspaces financial information (Controller).
The Controller should not be able to create or delete tenants, projects and services.