Currently, there is limited value of Notes (the ones with a musical note icon) in Ledger, only (usually) managers with EDIT capability can read them, otherwise you must provide EDIT capability to the rest. Maybe you can solve it by splitting Edit into Edit (includes Read) and Open ( =Read Only) Notes in the Passwords capabilities list. In general, I see you are missing Read-only capability in many sections of the list.