A comma-separated list of groups (i.e. groupnames from CollabNet TeamForge) who should have read-only privileges throughout Hudson. This will not restrict any rights they may have in addition to read.