---
title: "Security Policy - View Only Role"
slug: "security-policy-view-only-role"
updated: 2025-08-26T14:31:34Z
published: 2025-08-26T14:31:34Z
canonical: "support.controlup.com/security-policy-view-only-role"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.controlup.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Policy - View Only Role

If you would like to grant user permissions to access the Real-Time Console and view systems and real-time performance data, you will first need to create a Security Role for that user or an AD Group. In our example, we use the name "View Only".

**To create the "View Only" Security Role:**

1. Open the **Security Policy** pane at the bottom of the Console.
2. In the Home ribbon, click the **Manage Roles**	  button.
3. Click  **Add New Role...![Add New Role button](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407141942673AddNewRole.png)**
4. Under  **Role Name,**	  enter View Only. Click the  **Add Users/Groups**	  button to assign an Active Directory group to this security role.
5. Click the **Search**	  button and select the AD group that includes the domain users for which you want to grant view-only permissions. Click **OK**	  to add the new role.  

![AD User Group with Search button](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407136542865ADUserGroup.png)
6. The new role "View Only" is now assigned to the AD group "AD_CUViewOnlyRole". Click **OK**	  to finish the role configuration.  

![New Role Added as AD_CUViewOnlyRole](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407137208849NewRoleAdded.png)
7. The View Only role is now added to the list along with the other default groups ControlUp Admins, Helpdesk, and Automation Admins. Click **OK**	  and wait until the changes are applied to the Security Policy Pane.  

![View Only role](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407146354065NewRoleVisible.png)
8. In the Security Policy Pane, the new column "View Only" is added and you can start to assign permissions for this new role.  

![View Only Role Added](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407139060241ViewOnlyRoleAdded.png)

## Actions to Set Permissions

Set the permission **Allow** to the following actions:

### Perform organization-wide actions

**Recommended actions:** Launch Controllers ![Launch Controllers icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407164699537LaunchControllers.png)

View Incidents ![View Incidents icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407165205137ViewIncidents.png)

View Events ![View Events icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407173433489ViewEvents.png)

View All Hypervisors ![View All Hypervisors icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407165766417ViewAllHypervisors.png)

Use Shared Credentials ![Use Shared Credentials icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407166060305UseSharedCredentials.png)

Connect to Data Source ![Connect To Data Source icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407166694545ConnectToDataSource.png)

**Optional actions to set the Allow permission:**

### Run Machines Actions

Connect to Windows Machine ![Connect To Windows Machine icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407155337489ConnectToWindowsMachine.png)

Connect to Linux Machine ![Connect To Linux Machine icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407155298833ConnectToLinuxMachine.png)

Event Viewer on Remote Computer** ![Event Viewer On Remote Machine icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407161712657EventViewerOnRemoteMachine.png)

Monitor File System** ![Monitor File System icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407154122001MonitorFileSystem.png)

### Installed Software

Display Installed Software** ![Display Installed Software icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407158000785DisplayInstalledSoftware.png)

Display Installed Updates** ![Display Installed Updates icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407157785105DisplayInstalledUpdates.png)

### Registry

Monitor Machine Registry** ![Monitor Machine Registry icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407159057041MonitorMachineRegistry.png)

### Services

Monitor Services** ![Monitor Services icon](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/4407159338641MonitorServices.png)

** Optional: Other "View Only" settings that may require remote admin privileges.