The Spotlight client be installed on a user's desktop to accomplish this. The read only group lies in the DiagnosticServer and it only works for the desktop client running on a Windows account. There is no equivalent properties on mobile/spotlightessentials app.