# View only user on client

**URL:** <https://forum.inductiveautomation.com/t/view-only-user-on-client/34058>\
**Category:** Ignition\
**Created:** [April 20, 2020, 8:57pm UTC](https://forum.inductiveautomation.com/t/view-only-user-on-client/34058 "2020-04-20T20:57:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![tom.wouters](https://avatars.discourse-cdn.com/v4/letter/t/d2c977/32.png) [@tom.wouters](https://forum.inductiveautomation.com/u/tom.wouters)\
**Post date:** [April 20, 2020, 8:57pm UTC](https://forum.inductiveautomation.com/t/view-only-user-on-client/34058/1 "2020-04-20T20:57:07Z")

</div>

Hello,

Is it possible to make a user that only has rights to view the screen?  
I have a client who didn’t set up the security level’s like they should have.  
At the moment the option “Inherit Permissions” is not used at all.

Do I have an option to skip this? Where for example there is a user that has “read-only” mode but not read-write.

I was thinking about making a user “ReadOnly”. Then I would edit a client-event script to say  
if: u"ReadOnly" in roles:  
system.util.setConnectionMode(2)  
else:  
system.util.setConnectionMode(3)

I got this from site below;  
[https://docs.inductiveautomation.com/display/DOC/Setting+Client+Read-Only](https://docs.inductiveautomation.com/display/DOC/Setting+Client+Read-Only)

I’m just making sure if there is an easier way to do this?

Thanks in advance!

---

<div class="post-metadata">

**Author:** ![tom.wouters](https://avatars.discourse-cdn.com/v4/letter/t/d2c977/32.png) [@tom.wouters](https://forum.inductiveautomation.com/u/tom.wouters)\
**Post date:** [April 29, 2020, 1:30pm UTC](https://forum.inductiveautomation.com/t/view-only-user-on-client/34058/2 "2020-04-29T13:30:15Z")

</div>

Any information on this?

I tried the following but it does not work:

**Client script on tag value change**  
On tag change: [System]Client/User/Username i call script  
project.Security.ReadOnly()

**Scrip Readonly**  
def ReadOnly():  
name = system.security.getUsername()  
if name == ‘User’:  
system.util.setConnectionMode(2)  
else:  
system.util.setConnectionMode(3)

Any ideas how i get a read only user?  
Thanks

---

<div class="post-metadata">

**Author:** ![c.bertulli](https://avatars.discourse-cdn.com/v4/letter/c/f19dbf/32.png) [@c.bertulli](https://forum.inductiveautomation.com/u/c.bertulli)\
**Post date:** [January 14, 2021, 1:21pm UTC](https://forum.inductiveautomation.com/t/view-only-user-on-client/34058/3 "2021-01-14T13:21:30Z")

</div>

I just did it in **Client Events** - **Startup**

```auto
if system.tag.readBlocking(['[System]Client/User/RolesString'])[0].value == 'ReadOnly':
	system.util.setConnectionMode(2) #2=ReadOnly
else:
	system.util.setConnectionMode(3) #3=ReadWrite

```