EEM policy that gives read only access on job