Which of the following actions need to be performed to only grant read access to the user on the IT directory?