# Block users from deleting images in docker registry

**URL:** https://community.sonatype.com/t/block-users-from-deleting-images-in-docker-registry/2708
**Category:** Sonatype Nexus Repository
**Tags:** docker
**Created:** [October 17, 2019, 2:07am UTC](https://community.sonatype.com/t/block-users-from-deleting-images-in-docker-registry/2708 "2019-10-17T02:07:04Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![steven](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@steven](https://community.sonatype.com/u/steven)
#### Post date: [October 17, 2019, 2:07am UTC](https://community.sonatype.com/t/block-users-from-deleting-images-in-docker-registry/2708/1 "2019-10-17T02:07:05Z")

</div>

I need help restricting some user’s privileges. I have Nexus 3.18 OSS and I am running a docker registry behind a reverse proxy. I would like to create 2 groups of users. The first group can login to the GUI with all permissions on all images (push/pull/delete). The second group can browse and pull images, but cannot delete images. The idea is to only give some users deletion privileges protecting most people from accidentally deleting or overwriting images. Any expert help is appreciated.

---

<div class="post-metadata">

### Author: ![rseddon](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/rseddon/32/341_2.png) [@rseddon](https://community.sonatype.com/u/rseddon)
#### Post date: [October 17, 2019, 9:30pm UTC](https://community.sonatype.com/t/block-users-from-deleting-images-in-docker-registry/2708/2 "2019-10-17T21:30:41Z")

</div>

This can be controlled using roles and privileges. Have a look at these resources:

[https://help.sonatype.com/learning/repository-manager-3/security-essentials](https://help.sonatype.com/learning/repository-manager-3/security-essentials)  
[https://help.sonatype.com/learn/repository-manager-3/security-model---users%2C-roles%2C-and-privileges](https://help.sonatype.com/learn/repository-manager-3/security-model---users%2C-roles%2C-and-privileges)

---

<div class="post-metadata">

### Author: ![steven](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@steven](https://community.sonatype.com/u/steven)
#### Post date: [October 18, 2019, 11:32am UTC](https://community.sonatype.com/t/block-users-from-deleting-images-in-docker-registry/2708/3 "2019-10-18T11:32:38Z")

</div>

Thanks, Rich. I was able to get it working.