Read-only access is a permission level that lets a user or software system view information without changing accounts, records, or settings. It separates observation from action: an assistant may retrieve an account balance, for example, but cannot initiate a transfer or edit account details.
In cybersecurity, limiting access to read-only follows the principle of least privilege and reduces the damage possible if an account or automated agent is compromised, misled, or given a harmful instruction. It is useful for monitoring, reporting, and AI-assisted queries. When a workflow needs to make changes, those capabilities should be granted separately, narrowly scoped, and protected with validation and approval controls for sensitive actions.