The user has the rights of a public user execpt it can never create a project, group, or team. Also it cant view internal projects.