Grant read only admin role to user without setting other role to read only

[Ken61]

Hello All,

We need to give some users read only admin role without affecting their old roles. I know if 'snc_read_only' is assign to those users with admin role will give them read only admin role. But this will also make all their existing roles to be read only as well. 

We want those users to still keep their old roles but only have read only admin role. 

What is the best way to get this done?

Thank You in advance.

[Sebastian R_]

Only way would be to create a lot of read acls for a custom read_only_admin role but this would be a huge change. Maybe it would be possible to use separate admin accounts or allow user to turn on/off the readonly automatically.

[Amit Gujarathi]

Hi @Ken61 ,

I trust you are doing great.

One way to give users a read-only admin role without affecting their old roles is to create a new role that includes the necessary read-only admin privileges, and then assign that role to the users in addition to their existing roles. Here are the steps to achieve this:

1. Create a new role with the necessary read-only admin privileges. Go to "User Administration" > "Roles", and then click on "New". Give the role a name, such as "Read-Only Admin", and select the appropriate permissions for the role.

2. Assign the new role to the users. Go to "User Administration" > "Users", and then search for the users you want to assign the read-only admin role to. Click on a user's name to open their user record, and then go to the "Roles" related list. Click "Edit" to add the "Read-Only Admin" role to the user's existing roles.

3. Verify that the users have the expected permissions. Log in as one of the users with the read-only admin role, and verify that they have access to the appropriate read-only admin functionality, but their existing roles are not affected.

Please Mark My Response as Correct/Helpful based on Impact

Regards,

Amit Gujarathi

[Ken61]

Hi @Amit Gujarathi,

Thank for your response, but after creating the role with snc_read_only and admin roles, then assigned the role to the user as you stated above. Everything is set to read only for the user including those existing priviledges the user has before.

Thanks

[NMcGarrity]

This does not give users read only Admin access.  What roles do I add to get them to have Read Only user access?