Scan all org, vm...in vcloud while keeping the login account READONLY?

Hi everyone,

I'm using SDK 1.5 for .NET and vCloud Director 1.5.1.

I have problem to get public IPs and used storage:

I'm writing a program to get usage for VM (vCPU, RAM, HDD....) from vcloud director

The program will sample EVERY org in vcloud.

As I need to sample EVERY org in vcloud, I need to use administrator@system to do so.

That is a security risk as administrator@system have admin right.

There is no option to set readonly user system-wide.

Is there any way I could:

1) Scan all org, vm...

2) The login account is READONLY?

Thank millions for any help