Hi Mark! What if I want to make ALL groups read-only with the exception of the Admin group. It doesn't seem feasible to put in the sys_id of every group...

Where would you put this script? Also, suppose you want to make ALL groups read-only except for 1 admin group. Can we modify the script to apply read-only to all groups except admin?