Access denied after adding a user to read-only operator

Having a problem.

Created a user (domain users membership), added user to Read-Only operators. When trying to access wia web console or standard console - get error access denied. Tried to set NTLM on IIS first - do not help.

SCOM 2012 R2.