# If you enable anonymous access in Argo CD (`users.anonymous.enabled`), what permissions do anonymous users have by default?

Argo CD, Medium (Advanced), RBAC & Security. https://k8wiz.com/uquiz/if-you-enable-anonymous-access-in-argo-cd-usersanonymousenabled-what-permissions-do-anonymous-users-have-by-default

- A. They have full admin access
- B. They inherit `role:readonly` permissions
- C. They are denied everything by default
- D. They get the permissions defined in `policy.default`

**Answer:** They get the permissions defined in `policy.default`

**Explanation:** Enabling anonymous users causes them to be assigned the role specified by `policy.default` (by default this is `role:authenticated`).