It was discovered that the Read-Only account is really not read only and can indeed change the watchdog settings of a radio. After raising a support ticket with Cambium we were informed that this is indeed the design and by choice.
We would like to make the Read-Only account exactly that and this request is to add a configuration option that is accessible from the Administrator login similar to:
Allow Read-Only to set Watchdog: Enabled / Disabled
Even better would be a “generic” setting for this account:
Allow Read-Only basic updates: Enabled / Disabled
Then if for some reason it is decided that the Read-Only account can change something else, that is blocked as well. We would like a TRUE Read-Only account on the radio.