Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags)

[YakshaB]

I have found below statement in the access control documentation
https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/access-control.html

Trigger DAG run | DAGs.can_edit, DAG Runs.can_create

but If I give dags.can_edit, user can also get pause/unpause permission, can we restrict this ?

[potiuk]

No - https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/access-control.html#dag-level-permissions see the pause toggle, it's linked with can_edit.

[YakshaB]

Thank you, @potiuk , for responding.
Is there any other way to achieve this? Earlier, there was a similar request: #30121.
Our scenario involves giving access to support engineers, where they should be able to trigger jobs, but they should not be allowed to change or alter DAG behavior (edit, pause, unpause, delete, etc.).
Is this possible with the current roles/permissions that Airflow provides?

[potiuk]

Not that I am aware of.