# Permission set for a readonly role

**URL:** <https://forum.opensearch.org/t/permission-set-for-a-readonly-role/16467>\
**Category:** OpenSearch Dashboards\
**Tags:** configure\
**Created:** [October 27, 2023, 8:51am UTC](https://forum.opensearch.org/t/permission-set-for-a-readonly-role/16467 "2023-10-27T08:51:29Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [October 31, 2023, 10:54am UTC](https://forum.opensearch.org/t/permission-set-for-a-readonly-role/16467/4 "2023-10-31T10:54:37Z")

</div>

@joaopfcruz Unfortunately the current version of the OpenSearch Dashboards allows for a read-only mode with Dashboards only enabled.  
This can be achieved by defining a role in the below option in opensearch\_dashbnoards.yml and assigning it to the individual users.

```auto
opensearch_security.readonly_mode.roles: ["read_only"]

```

Please also be aware that read-only mode in OpenSearch Dashboards doesn’t mean that the user has read-only access to the data and other OpenSearch Dashboards objects.

Your read-only user should also contain a kibana\_read\_only role for OpenSearch Dashboards objects and any read-only roles suggested by @jasonrojas to prevent write access to indices.

---

_[View the full topic](https://forum.opensearch.org/t/permission-set-for-a-readonly-role/16467)._