We need to make sure that openstackclient supports this new RBAC action which is 'access_as_readonly'. For that some changes in the openstack SDK may also be needed but that has to be checked first.