How to Create a Read-Only User for the SAP Business One Service Layer

You can create a read-only user for the SAP Business One Service Layer. The Service Layer has no security model of its own: it signs in with a standard SAP Business One user and enforces the same authorisations as the SAP Business One client. A user with Read Only authorisations can retrieve data (GET) but is refused when it tries to create, change or delete data (POST, PATCH, DELETE). This is the recommended approach for reporting tools, dashboards, integrations and AI agents that only need to read data from SAP Business One.