goauthentik / goauthentik/authentik
Role Read only can't access admin interface
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 644
Description
**Describe the bug**
(If I have understood the intention of the role correctly)
An user added to group **authentik Read-only** can't access admin interface
**To Reproduce**
Steps to reproduce the behavior:
1. add an user to group **authentik Read-only**
2. login with that user
3. there is no **admin interface** button
**Expected behavior**
it should be present the **admin interface** button
**Screenshots**

there is no button present

add permission to fix:


**Logs**
**Version and Deployment:**
- authentik version: surely 2024.8.2 and onwards
- Deployment: docker-compose
**Additional context**
to fix:
Adding the **access admin interface** permission to the role fix the problem
In the blueprint **Default - RBAC -Read-only** (blueprints/default/rbac-role-read-only.yaml) :
attrs:
permissions: !Enumerate [
!Context goauthentik.io/rbac/models,
SEQ,
!Format [
"%s.view_%s",
!Value 0,
!Index 0,
],
]
It takes all the permissions that contain the string **view**, thus excluding that needed to access the administration interface.
maybe renaming the permission **Can access admin interface** into **Can view admin interface** is the simplest fix
Contributor guide
Assessment
This issue has not been assessed yet.