If you're using the App Connect Operator, either the long-term Support Cycle-2 (SC2) or continuous delivery (CD) streams, then you can use Keycloak for IAM for the App Connect Dashboard. You can create users with a "viewer" role that have read-only access; they can browser Integration Runtimes, but not make any changes to them. They are also restricted from making changes to other resources (e.g. BAR files or Configurations)
------------------------------
Matt Bailey
Software Engineer
IBM
------------------------------