Can a third party account be added as read only?

Yes, it is possible to add a third party account so that no payments or transfers can be initiated. This must be indicated upon application.