Cheers,
We use Frodo to make AM, IDM, and IG scripts digestible by humans for the sake of code reviews. We’ve tried to setup a user with Realm and Application read-only access that we can use with the aoo, but it appears that the app needs admin access. Is this correct?
In short, yes. All administrative access requires administrative permissions. As your requirement is “read” focused, may I propose that you build a purposeful account with administrative read permissions for the task.
See Delegated Administration in the product docs: Secure administrative access :: PingAM 7.5.0
Simply, adding such a user to a group with the correct administrative privileges is the easy path.
Cheers