When I want to invite a user to see an installation "monitor only" and I explicitly disable "full control", when showing the list of pending invites, there still is "full control".
So I had to revoke the invitations just to be sure. Is that a security or a visualization glitch?