Read-only admins have view access to most data in the Admin Console. Like report admins, read-only admins are unable to edit data. The only settings that read-only admins can change are their own notifications and API token settings.
Read-only admins can view the following:
- Apps and app instances
- Okta settings
- System Log
- Authorization server scope
- Device Trust enablement settings
- Mobile policies
- Wifi policies
- Device details
- Sign-on policies
For a complete view of all of the permissions that are granted and excluded from this role, see Administrator comparison tables.