You need to assign read-only access to an internal auditor so the auditor can access the project’s Project Site only