We needed to have our External Auditors defined to have read only access to our completed testing and evidence. This is a read only access.  What we found is we need to define the external auditors to the External Auditor role and group.  Without both the role and the group, the external auditors had limited access.  Additionally, we had to have the following reports added by Workiva and read permissions granted for the External Auditor group [Permissions] Action Plans, [Permissions] Issues, and [Permissions] Test Forms. Now that we have all of this defined, it is not an issue to add another external auditor as long as we we add the user to the group and add the role to the user.

Just wondering if others have had issues adding read-only users like external auditors and if so, why the [Permissions} reports are not added as a default to ease the adding of read-only users.