We need to create a generic user account for the Grafana Zabbix plugin. We don't want this account to be able to modify anything in the Zabbix configuation. Can you confirm what would be the best practice here?

I am thinking:

1) create a user e.g. grafana_user, as a basic "Zabbix User" (not admin or super-admin) in a new user group e.g. grafana_ro_group

2) create a nested host group grafana_all_hosts containing all other host groups

3) add grafana_all_hosts to grafana_ro_group with read permission and include subgroups checked