New accounts are created with read-only access. An administrator can grant editing or other roles if needed.