[otrs] Read-only company tickets

Hello, I want that a specific customer account can access the customer frontend but with the following restrictions: - he can't be able to create/update any ticket - he can be able to view tickets created under the customer.id (company tickets), but not update any of them This allows me to have a customer account that is only used to see some other customer account tickets, but as read-only. Any suggestions on achieving this? TIA.