Use the below steps in RMM to configure user with Readon only access to RMM GUI


1) If the user is not already added as a Linux user, then add the user with the Linux useradd command.

        e.g. "useradd Readonly-user"


2) Provide a password for the user, 

         e.g "passwd Readonly-user"

3) Add the user to the RMM with  


       "rw user add <username> --org Admin --org-visibility", 


        e.g. "rw user add Readonly-user --org Admin --org-visibility"


4) Create read only role in RMM  using rw role add cmd 


        e.g To create a readonly role with name 'RMM-readonly-role':

        rw role add RMM-readonly-role --readonly-role


5) Assign the Readonly-user user RMM-readonly-role.

        e.g. "rw role grant RMM-readonly-role --user Readonly-user"


Now this user can log in to the RMM, but wont be able to Pause policies or add hosts to waves, or any other functions that change the configuration.    The screens will be available to that user, but any attempt to make changes will fail.


commands used

useradd Readonly-user
passwd Readonly-user
rw user add Readonly-user --org Admin --org-visibility
rw role add RMM-readonly-role --readonly-role
rw role grant RMM-readonly-role --user Readonly-user