I never saw the similar use-case, to be limited to only read-only DB. I think that everything, which requires some writes won't work. So you won't be able to update any realm, client, user etc. Also users won't be able to update their passwords, update their profile through account management, even login with WebAuthn or HOTP (as both those require DB writes during authentication), link with social accounts etc. I guess that in many scenarios you may see some strange exceptions shown in the UI instead of some "nice" message like "You can't update password" . That's because we never tried to test the setup like this. But you can try and see... Marek On 05. 12. 19 8:49, Gunnar Hilling wrote: