Comment 13 for bug 1688612

This is possibly a duplicate of https://bugs.launchpad.net/charm-keystone/+bug/1741723 which is about policy overrides using the policy.d directory for a service charm. There is ongoing work (within the scope of the 19.10 charms delivery) to deliver this across a number of charms (including neutron-api, nova-cloud-controller and keystone).

The crafting of read-only users would be to create the users, and then create policy overrides around (say) roles, or other policy items.