Which interface needed to run `mmc`?

For a management snap on our device, we want to run mmc extcsd read /dev/mmcblk0 so we can report system health for eMMC lifetime estimation. We can use block-device interface for this but we don’t really need write access. Is there a more restrictive interface we can use?