Skip to content

Cookie preferences

We use cookies for our own analytics and to see how our campaigns perform. We never sell your data. Necessary cookies keep the site working and cannot be switched off. See our Cookie Policy for details.

Security, load balancing and remembering your cookie choice.

Show us which pages people read and how they find the site, so we can improve it (Google Analytics).

Show us which of our ad campaigns bring visitors to the site (Google Ads).
© 2026 The ThingsBoard Authors
 
Try for free

ThingsBoard Cloud

Choose your data region

Your data stays in the region you choose, for residency and compliance. No credit card required.

North America Data stored in North America Europe Data stored in the European Union

Rather run it yourself? Install on your own servers

Grant Read-Only Access to All Tenant Data

Give a group of analysts read access to all tenant entities and telemetry without allowing any writes. This uses a single Generic role assigned at Tenant level.

Prerequisites: Basic familiarity with Roles and RBAC.

Step 1. Create the role

Section titled “Step 1. Create the role”
  1. Navigate to Customers & users ⇾ Roles.
  2. Click + Add role.
  3. Name: Analyst Read-only — Role type: Generic.
  4. Add one permission entry: Resource All, Operations Read, Read Attributes, Read Telemetry.
  5. Click Add.

Step 2. Create a user group and assign the role

Section titled “Step 2. Create a user group and assign the role”
  1. Navigate to Customers & users ⇾ Users ⇾ Groups.
  2. Click Add entity group, name it Analysts.
  3. Open the group details ⇾ Roles tab ⇾ Add.
  4. Select: Role type Generic, Role Analyst Read-only.
  5. Click Add.

Result

Section titled “Result”

Any user added to the Analysts group can view all tenant entities and telemetry but cannot create, modify, or delete anything.

© 2026 The ThingsBoard Authors ·