# How to set a user on read-only or read/write mod using a script on perspective

**URL:** <https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529>\
**Category:** Ignition\
**Created:** [April 17, 2022, 10:11am UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529 "2022-04-17T10:11:41Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![sebastien\_ng](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sebastien_ng/32/55297_2.png) [@sebastien\_ng](https://forum.inductiveautomation.com/u/sebastien_ng)\
**Post date:** [April 17, 2022, 10:11am UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/1 "2022-04-17T10:11:41Z")

</div>

Hello sommeone know wow to set a user on read-only or read/write setting using perspective using a script ?

I want put my perspective view on read-only to other user

for exemple:  
if de user connected is “AAA”  
set view on read-only  
else  
set view on read/write

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [April 17, 2022, 12:36pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/2 "2022-04-17T12:36:02Z")

</div>

The correct way is to create roles and assign roles to each user.

e.g.  
User ‘AAA’ is assigned role ‘User’.  
User ‘BBB’ is assigned roles ‘User’ and ‘Technician’.

![](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/f/0feadefe9ddba6b17118b1c2c9230b4ccfa41ce1.png)

[https://docs.inductiveautomation.com/display/DOC81/Security+in+Perspective#SecurityinPerspective-PerspectiveViewsSecurity](https://docs.inductiveautomation.com/display/DOC81/Security+in+Perspective#SecurityinPerspective-PerspectiveViewsSecurity)

Setting the view security is described in the manual.

---

<div class="post-metadata">

**Author:** ![sebastien\_ng](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sebastien_ng/32/55297_2.png) [@sebastien\_ng](https://forum.inductiveautomation.com/u/sebastien_ng)\
**Post date:** [April 17, 2022, 2:05pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/3 "2022-04-17T14:05:47Z")

</div>

Thank you. I will try it and read link doc

---

<div class="post-metadata">

**Author:** ![sebastien\_ng](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sebastien_ng/32/55297_2.png) [@sebastien\_ng](https://forum.inductiveautomation.com/u/sebastien_ng)\
**Post date:** [April 17, 2022, 2:59pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/4 "2022-04-17T14:59:51Z")

</div>

I have another problem. I can’t see my user roles

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/d/0d3c8114b06bbed8312eff239de6bbdcf1795f97.png)

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [April 17, 2022, 3:24pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/5 "2022-04-17T15:24:29Z")

</div>

Did you create the users and roles?

1. On the gateway go to **Config | Security | Users, Roles** , choose your user source.
2. Create the roles you require. e.g. ‘User’, ‘Technician’, ‘Engineer’, etc.
3. Create the users and assign roles to each user.

[https://docs.inductiveautomation.com/display/DOC81/Managing+Users+and+Roles](https://docs.inductiveautomation.com/display/DOC81/Managing+Users+and+Roles)

---

<div class="post-metadata">

**Author:** ![sebastien\_ng](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sebastien_ng/32/55297_2.png) [@sebastien\_ng](https://forum.inductiveautomation.com/u/sebastien_ng)\
**Post date:** [April 17, 2022, 3:31pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/6 "2022-04-17T15:31:48Z")

</div>

yes, I create user and roles

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/f/3/f36e4bf4ae567d354073053a12c3c99fdb2abd1d.png)  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/3/639dbe4eeec831eb03800dc4cf599cb1e2453b3a.png)  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/f/3/f35a64495011bb2392441fa47b735a4a20235f85.png)

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [April 17, 2022, 4:28pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/7 "2022-04-17T16:28:58Z")

</div>

On the Designer try **File | Update Project** to see if that refreshes the roles in the _Edit Permissions for view_ dialog.

---

<div class="post-metadata">

**Author:** ![sebastien\_ng](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sebastien_ng/32/55297_2.png) [@sebastien\_ng](https://forum.inductiveautomation.com/u/sebastien_ng)\
**Post date:** [April 17, 2022, 4:58pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/8 "2022-04-17T16:58:56Z")

</div>

I did it but it is not working.

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [April 17, 2022, 5:11pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/9 "2022-04-17T17:11:26Z")

</div>

Are your **Project | Project Properties** Identity Provider and User Source correct?

 ![Identity providers](https://us1.discourse-cdn.com/inductiveautomation/original/3X/c/d/cd001e401877cf105ae0ef75a4a25d0882eeaddd.png)

They should be set to the user source that contains the users and roles you are trying to use.

---

<div class="post-metadata">

**Author:** ![swolnisty](https://avatars.discourse-cdn.com/v4/letter/s/7bcc69/32.png) [@swolnisty](https://forum.inductiveautomation.com/u/swolnisty)\
**Post date:** [April 18, 2022, 4:42pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/10 "2022-04-18T16:42:01Z")

</div>

If you are trying set security permissions for a project under the Perspective \> Permissions section of the project properties, like OP showed a screenshot of, those are defined under the Config \> Security \> Security Levels section of the gateway. A security level contained within the “Roles” security level needs to be manually added for each role defined in the identity provider, which is not always immediately obvious.

[https://docs.inductiveautomation.com/display/DOC81/Security+Levels](https://docs.inductiveautomation.com/display/DOC81/Security+Levels)

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [April 18, 2022, 5:16pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/11 "2022-04-18T17:16:28Z")

</div>

> [@swolnisty](#):
>
> A security level contained within the “Roles” security level needs to be manually added for each role defined

I never really understood why this is a manual process 🤔 @paul-griffith?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [April 18, 2022, 5:19pm UTC](https://forum.inductiveautomation.com/t/how-to-set-a-user-on-read-only-or-read-write-mod-using-a-script-on-perspective/58529/12 "2022-04-18T17:19:14Z")

</div>

Not my area, but my guess is we didn’t want to automatically bring in all the ‘legacy’ baggage that may not actually apply to an IdP/Perspective security context anyways. Better to give you the tools and make it your problem 🙂

That said, it does seem like we could expose a manual “copy roles from user source” button, or something. Again, not my area. Maybe a good thing to put in an ideas post…