Selecting the minimum necessary object permissions for a read-only integration user that must access all Opportunity records without opening up record sharing broadly.