for read only access to repos created by someone else, you'd have a

view

permission "inherit" from the org, and have any other permissions (such as

write

) be only granted to the

creator

relation on the repository