In addition, when specifying a hostgroup, the root user can be limited to RO access by addingthe root_ro parameter.
Using Export Control
23