Is a readonly login for status board type display possiblle?

[MakOwner]

I'd like to be able to display the various pfsense dashboard widgets from an account that doesn't require frequent re-authentication.
Is it possible to set up an account with a 0 value timeout that is essentially a read-only account?

I have poked about in the local users interface but I don't see any blatantly obvious way to set up a read only user or group.

[stephenw10]

You can create a user with the permission 'deny config write' and it would not be able to make any changes.

I haven't tried to ever create a user that doesn't get logged out. I can imagine that being an issue.

You might want to consider exporting data to a logging/monitoring system and displaying it there instead. There are numerous examples of doing that with Prometheus for example.

Steve

[MakOwner]

@stephenw10
I'm sure someone spent a fair amount of time on the dashboard and widgets.
Seems a shame to re-invent the wheel.

How do you configure "deny config write" ?
I don't see that in the GUI.

[stephenw10]

It's a privilege you can assign to a user or group:
https://docs.netgate.com/pfsense/en/latest/usermanager/privileges.html