Login to the Access Manager Console.
With the Access Control tab selected, click the name of the realm where your agent profile role was created.
Click the Privileges tab.
Find and click the agent profile role. For example: agentprofilerole
On the new page, check the “Read only access to data stores” checkbox.
Click Save.