Add readonly permission for AD user to list of datastores

[vmCalgary]

I have a list of datastores in $stores. How do I add a readonly, don't propogate permission for one AD user?

foreach ($store in $stores) { add readonly permission for ADDOMAIN\bsmith ?????????

[LucD]

With the New-VIPermission cmdlet.