the reader role allows multi server job access over the user role, do they need this?
The users will only be able to edit jobs\schedules that they own, what is it you're concerned about?
-----------------------------------------------------------------------------------------------------------
"Ya can't make an omelette without breaking just a few eggs" 😉