# What are possible options for authentication.roles configuration in REST Proxy?

**URL:** <https://forum.confluent.io/t/what-are-possible-options-for-authentication-roles-configuration-in-rest-proxy/4842>\
**Category:** REST Proxy\
**Created:** [22 April 2022 05:34 UTC](https://forum.confluent.io/t/what-are-possible-options-for-authentication-roles-configuration-in-rest-proxy/4842 "2022-04-22T05:34:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shubhamshirur](https://avatars.discourse-cdn.com/v4/letter/s/4bbf92/32.png) [@shubhamshirur](https://forum.confluent.io/u/shubhamshirur)\
**Post date:** [22 April 2022 05:34 UTC](https://forum.confluent.io/t/what-are-possible-options-for-authentication-roles-configuration-in-rest-proxy/4842/1 "2022-04-22T05:34:33Z")

</div>

Hi,

Can I configure REST PROXY for read-only or write-only permissions with BASIC authentication?

I see **authentication.roles** configuration, what are the possible options to set it other than Admin ? OR RBAC is the only option to control the access?

Please help me out.

Thanks.

---

<div class="post-metadata">

**Author:** ![mmuehlbeyer](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/mmuehlbeyer/32/1088_2.png) [@mmuehlbeyer](https://forum.confluent.io/u/mmuehlbeyer)\
**Post date:** [22 April 2022 06:55 UTC](https://forum.confluent.io/t/what-are-possible-options-for-authentication-roles-configuration-in-rest-proxy/4842/2 "2022-04-22T06:55:11Z")

</div>

Hi @shubhamshirur

afaik this is only possibke with RBAC.  
`authentication.roles`defines which user is allowed to login

see also  
[https://docs.confluent.io/platform/current/kafka-rest/production-deployment/rest-proxy/security.html#crest-security](https://docs.confluent.io/platform/current/kafka-rest/production-deployment/rest-proxy/security.html#crest-security)

best,  
michael