# Save query in read-only tenant

**URL:** <https://forum.opensearch.org/t/save-query-in-read-only-tenant/15675>\
**Category:** OpenSearch Dashboards\
**Created:** [August 28, 2023, 6:39am UTC](https://forum.opensearch.org/t/save-query-in-read-only-tenant/15675 "2023-08-28T06:39:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ciuline](https://avatars.discourse-cdn.com/v4/letter/c/0ea827/32.png) [@ciuline](https://forum.opensearch.org/u/ciuline)\
**Post date:** [August 28, 2023, 6:39am UTC](https://forum.opensearch.org/t/save-query-in-read-only-tenant/15675/1 "2023-08-28T06:39:12Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):  
Opensearch version - 2.5.0  
Server OS - CentOS 8  
Browser - Chrome/Firefox

**Describe the issue** :  
Hello,  
I have created a role which has read-only access on a certain tenant (see screenshot). However, I would like the users assigned to this role to have the possibility to create saved queries, but I have not found any ways of making this happen; it’s probably not even possible to do that, so this is why am posting this question here. Is there any way of modifying these tupes of permission on a more granular level, so that I can enable write permissions just for saved queries?  
Thanks.

Alexandru

**Configuration** :

**Relevant Logs or Screenshots** :

 ![readOnly](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/b/baf13f97560f1d007e6fe3cd9cc41ab0e11a1afb.png)

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [August 28, 2023, 8:46am UTC](https://forum.opensearch.org/t/save-query-in-read-only-tenant/15675/2 "2023-08-28T08:46:11Z")

</div>

@ciuline As per documentation, only two permissions are available for the tenants - kibana\_all\_read and kibana\_all\_write. There are no more granular permissions available at the moment.

> **[OpenSearch Dashboards multi-tenancy](https://opensearch.org/docs/1.2/security-plugin/access-control/multi-tenancy/#give-roles-access-to-tenants)**
>
> OpenSearch Dashboards multi-tenancy