Hi Ruel,

When creating the group in the Laserfiche Administration Console, there should be a checkbox reading "Allow only read-only access" which would only be bypassed if a member of the group has the Manage Trustees privilege.

You can also set it up "manually" using a combination of feature rights (set only Search and maybe Export if they'd need to open electronic documents) and entry access rights (set only Browse and Read) granted to the group. Feature rights are configured in the group properties through the Laserfiche Administration Console; access rights are set from the Laserfiche Client or Web Access by a user with the Manage Entry Access privilege. You can read more about Laserfiche security here.

Hope this helps!