As part of the configuration of the workfront for Experience Manager enhanced connector,the solutions consultant...

In this case, the solutions consultant needs to limit thelegal team’s accessto read-only for all content in AEM. Since the legal team will be working in Workfront and accessing AEM via the enhanced connector, the best way to manage their access is to applyAccess Control Entries (ACEs)to the wf-workfront-users user group.

ACEsallow you to specify detailed permissions for a group or user in AEM, such as granting read-only access to specific resources or folders within the DAM.

Options A and C would either grant too much access (as in the case of the Everyone user group) or allow contributions, which is beyond the requirement of just reading access.

Refer toAEM Access Control Management documentationto learn more about setting up ACEs and managing permissions.