Hello Marcel,
Operator role itself has almost the same privileges as the administrator (which includes displayalerts) with the caveats:
restricted from:
Creating or editing user accounts.
Issuing the resetconfig command.
Upgrading the appliance.
Issuing the systemsetup command or running the System Setup Wizard.
Issuing the adminaccessconfig command.
Performing some quarantine functions (including creating, editing, deleting, and centralizing quarantines).
Modifying LDAP server profile settings other than username and passphrase, if LDAP is enabled for external authentication.
Whereas the Read-Only operator is a restricted role with only:
Access to view configuration information. Users with the Read-Only Operator role can make and submit changes to see how to configure a feature, but they cannot commit them. Users with this role can manage messages in quarantines, if access is enabled in a quarantine.
Users with this role cannot access the following:
File system, FTP, or SCP.
Settings for creating, editing, deleting, or centralizing quarantines.
Everything else not available is restricted (including displayalerts).
Regards,
Matthew
