Related to case #354908. A workaround for this exists (thanks jshaugn), but from a sysadmin perspective, it would be a lot slicker to have a read-only default group, along the lines of 'All Resource Role' but in this case it would be 'Read Only Role'
 Create a new Group(Mixed and Recursive) .. Create a new Role(AllSee) with only alert and measure .. and a new user(viewer) .. stitch them all.
This bug was previously known as http://jira.rhq-project.org/browse/RHQ-2481
closing per 20-Dec triage