I would live the capability for users to be added as a Reader if they belong to a specific OU in AD.