Settings for view-only access

[psychofaktory]

Is there a recommendation as to which settings are necessary for "view-only" access to the webgui?

[franco]

There's read-only privilege in the permissions to add to the user or group to make them read-only. That's it.


Cheers,
Franco

[psychofaktory]

So thats the permissions I can choose:

AJAX: Get Service Providers
AJAX: Get Stats
All pages
Dashboard (all)
Dashboard (widgets only)
Diagnostics: ARP Table
Diagnostics: Authentication
Diagnostics: Backup / Restore
Diagnostics: Configuration History
Diagnostics: Factory defaults
Diagnostics: Firewall sessions
Diagnostics: Firewall statistics
Diagnostics: Halt system
Diagnostics: Logs: DHCP
Diagnostics: Logs: Firewall: Live View
Diagnostics: Logs: Firewall: Plain View
Diagnostics: Logs: Firewall: Summary View
Diagnostics: Logs: Gateways
Diagnostics: Logs: Settings
Diagnostics: Logs: Settings/Targets
Diagnostics: Logs: System
Diagnostics: NDP Table
Diagnostics: Netflow configuration
Diagnostics: Netstat
Diagnostics: Network Insight
Diagnostics: Packet Capture
Diagnostics: PF Table IP addresses
Diagnostics: Ping
Diagnostics: Reboot System
Diagnostics: Routing tables
Diagnostics: Shaper status
Diagnostics: Show States
Diagnostics: System Activity
Diagnostics: System Health
Diagnostics: Test Port
Diagnostics: Traceroute
Firewall: Alias: Edit
Firewall: Aliases
Firewall: Categories
Firewall: NAT: 1:1
Firewall: NAT: 1:1: Edit
Firewall: NAT: NPT
Firewall: NAT: NPT: Edit
Firewall: NAT: Outbound
Firewall: NAT: Outbound: Edit
Firewall: NAT: Port Forward
Firewall: NAT: Port Forward: Edit
Firewall: Normalization
Firewall: Rules
Firewall: Rules: Edit
Firewall: Schedules
Firewall: Schedules: Edit
Firewall: Shaper
Firewall: Virtual IP Address: Edit
Firewall: Virtual IP Addresses
Interfaces: Assign network ports
Interfaces: Bridge
Interfaces: Bridge edit
Interfaces: GIF
Interfaces: GIF: Edit
Interfaces: GRE
Interfaces: GRE: Edit
Interfaces: Groups
Interfaces: Groups: Edit
Interfaces: LAGG
Interfaces: LAGG: Edit
Interfaces: Loopback
Interfaces: PPPs
Interfaces: PPPs: Edit
Interfaces: VLAN
Interfaces: VLAN: Edit
Interfaces: VXLAN
Interfaces: WAN
Interfaces: Wireless
Interfaces: Wireless edit
Lobby: Login / Logout / Dashboard
Nut
OPNsense central management
Sensei: Dashboard / Report access
Services: Captive Portal
Services: Chrony
Services: DHCP Relay
Services: DHCP server
Services: DHCP Server: Edit static mapping
Services: DHCPv6 Relay
Services: DHCPv6 server
Services: DHCPv6 Server: Edit static mapping
Services: DNS Filter
Services: Dnsmasq DNS: Edit Domain Override
Services: Dnsmasq DNS: Edit Host
Services: Dnsmasq DNS: Log File
Services: Dnsmasq DNS: Settings
Services: Intrusion Detection
Services: MDNS Repeatery
Services: NTP
Services: Proxy
Services: Router advertisements
Services: Unbound (MVC)
Services: Unbound DNS: Access Lists
Services: Unbound DNS: Advanced
Services: Unbound DNS: Edit Domain Override
Services: Unbound DNS: Edit Host Override
Services: Unbound DNS: General
Services: Unbound DNS: Log File
Status: CARP
Status: DHCP leases
Status: DHCPv6 leases
Status: HA backup
Status: Interfaces
Status: IPsec
Status: IPsec: Leasespage
Status: IPsec: SAD
Status: IPsec: SPD
Status: NTP
Status: NTP GPS
Status: NTP PPS
Status: OpenVPN
Status: Services
Status: System logs: Captive portal
Status: System logs: IPsec VPN
Status: System logs: NTP
Status: System logs: OpenVPN
Status: System logs: PPP
Status: System logs: Routing
Status: System logs: Wireless
Status: Traffic Graph
Status: Wireless
System Setup Wizard
System: Advanced: Admin Access Page
System: Advanced: Firewall and NAT
System: Advanced: Miscellaneous
System: Advanced: Network
System: Advanced: Tunables
System: Authentication Servers
System: CA Manager
System: Certificate Manager
System: Crash Reporter
System: CRL Manager
System: Deny config write
System: Firmware
System: Gateway Groups
System: Gateways
System: Gateways: Edit Gateway
System: Gateways: Edit Gateway Groups
System: General Setup
System: Group manager
System: Group Manager: Add Privileges
System: High Availability
System: License
System: Settings: Cron
System: Static Routes
System: User Manager
System: User Manager: Add Privileges
System: User Password Manager
VPN: IPsec
VPN: IPsec: Edit Phase 1
VPN: IPsec: Edit Phase 2
VPN: IPsec: Edit Pre-Shared Keys
VPN: IPsec: Key Pairs
VPN: IPsec: Mobile
VPN: IPsec: Pre-Shared Keys List
VPN: OpenVPN: Client
VPN: OpenVPN: Client Export Utility
VPN: OpenVPN: Client Specific Override
VPN: OpenVPN: Server
VPN: Wireguard
Services: Monit System Monitoring page
XMLRPC Library

I can't find an entry with read only here.

I have already tried a few things from the list here.
But it was always possible for the user not only to view the configuration but also to edit it.