When trying to create a "read only" user within OCUM 5.1 we have enabled the following:
User has the GlobalRead role
User has the GlobalReport role
User has a custom role, which inherits from GlobalRead with the capability dfm.database.read enabled for the Global group.
I am still getting:
[a45wdzz@nasnom02 ~]$ dfm user list
Error: To use the list command, you must have Global DFM Database Read capability.
[a45wdzz@nasnom02 ~]$ dfm controller list
There are no controllers.
There are several pieces of documentation that reference the "global database read" capability, but that is not a listed role and I don't see any other references inside the GUI to this capability, other than on that global group.