It would not work, I guess. It is not the user who's connecting that has to choose between "with" or "without" control on the computer. It should depends on the PC he's connecting to.

Ex:
PC01: View-Only, no one have the control over this PC on connection, except an Admin, for example. You can only (over)watch the screen of that PC.

PC02: Normal mod, you can control and view the screen.

It would be a feature such as a "screen-sharing only connection". That can be tweaked on each PC / group of PC, through the installer.. Like an "overwatch" connection..

Role based permission isn't allowing this, and SuspendControlAtStartup is an option for those who connects, so it's on "the wrong side" of the connection.

Hope I am clear enough, let me know if it's not.

PS: I am talking about these permanent connections with the agent, not the temporary ones.

It would allow people to only monitor the screen, but not control the PC.

Ex:
I need Mister A to monitor the computer of Mister B, but A doesn't need to interact with B's computer, so I setup that B's computer is a "View only" guest, by default.

It would be a feature such as "Suspend Guest Input" that Hosts have, but reversed, and by default.