diff --git a/src/app/features/metadata/components/cedar-template-form/cedar-template-form.component.html b/src/app/features/metadata/components/cedar-template-form/cedar-template-form.component.html
index b0b2971b5..9fdbc7573 100644
--- a/src/app/features/metadata/components/cedar-template-form/cedar-template-form.component.html
+++ b/src/app/features/metadata/components/cedar-template-form/cedar-template-form.component.html
@@ -7,13 +7,15 @@ <h3 class="text-lg">{{ 'project.metadata.addMetadata.publishedText' | translate
         } @else {
           <h3 class="text-lg text-red-500">{{ 'project.metadata.addMetadata.notPublishedText' | translate }}</h3>
         }
-        <p-button
-          class="w-10rem flex-shrink-0 btn-full-width"
-          severity="secondary"
-          [label]="'project.metadata.addMetadata.editRecord' | translate"
-          (onClick)="editModeEmit()"
-        >
-        </p-button>
+        @if (showEditButton()) {
+          <p-button
+            class="w-10rem flex-shrink-0 btn-full-width"
+            severity="secondary"
+            [label]="'project.metadata.addMetadata.editRecord' | translate"
+            (onClick)="editModeEmit()"
+          >
+          </p-button>
+        }
       </div>
     }
 
diff --git a/src/app/features/metadata/components/metadata-license/metadata-license.component.html b/src/app/features/metadata/components/metadata-license/metadata-license.component.html
index ec313d5de..092b81ff8 100644
--- a/src/app/features/metadata/components/metadata-license/metadata-license.component.html
+++ b/src/app/features/metadata/components/metadata-license/metadata-license.component.html
@@ -2,7 +2,7 @@
   <div class="flex justify-content-between align-items-center">
     <h2>{{ 'project.overview.metadata.license' | translate }}</h2>
 
-    @if (!hideEditLicense()) {
+    @if (!readonly()) {
       <p-button
         severity="secondary"
         [label]="'common.buttons.edit' | translate"
diff --git a/src/app/features/metadata/components/metadata-license/metadata-license.component.ts b/src/app/features/metadata/components/metadata-license/metadata-license.component.ts
index a51bd19d2..f131c3d07 100644
--- a/src/app/features/metadata/components/metadata-license/metadata-license.component.ts
+++ b/src/app/features/metadata/components/metadata-license/metadata-license.component.ts
@@ -15,6 +15,6 @@ import { LicenseModel } from '@shared/models';
 })
 export class MetadataLicenseComponent {
   openEditLicenseDialog = output<void>();
-  hideEditLicense = input<boolean>(false);
+  readonly = input<boolean>(false);
   license = input<LicenseModel | null>(null);
 }
diff --git a/src/app/features/metadata/components/metadata-tags/metadata-tags.component.html b/src/app/features/metadata/components/metadata-tags/metadata-tags.component.html
index 730cab374..24aced840 100644
--- a/src/app/features/metadata/components/metadata-tags/metadata-tags.component.html
+++ b/src/app/features/metadata/components/metadata-tags/metadata-tags.component.html
@@ -2,6 +2,19 @@
   <div class="flex flex-column gap-3">
     <h2>{{ 'project.overview.metadata.tags' | translate }}</h2>
 
-    <osf-tags-input (tagsChanged)="tagsChanged.emit($event)" [tags]="tags()" />
+    @if (readonly()) {
+      <div class="flex flex-wrap gap-2">
+        @for (tag of tags(); track tag) {
+          <p-tag
+            class="cursor-pointer hover:bg-black-alpha-10"
+            [value]="tag"
+            severity="info"
+            (click)="tagClicked(tag)"
+          />
+        }
+      </div>
+    } @else {
+      <osf-tags-input (tagsChanged)="tagsChanged.emit($event)" [tags]="tags()" />
+    }
   </div>
 </p-card>
diff --git a/src/app/features/metadata/components/metadata-tags/metadata-tags.component.ts b/src/app/features/metadata/components/metadata-tags/metadata-tags.component.ts
index 512a77c9e..33df80c93 100644
--- a/src/app/features/metadata/components/metadata-tags/metadata-tags.component.ts
+++ b/src/app/features/metadata/components/metadata-tags/metadata-tags.component.ts
@@ -1,19 +1,29 @@
 import { TranslatePipe } from '@ngx-translate/core';
 
 import { Card } from 'primeng/card';
+import { Tag } from 'primeng/tag';
 
-import { ChangeDetectionStrategy, Component, input, output } from '@angular/core';
+import { ChangeDetectionStrategy, Component, inject, input, output } from '@angular/core';
+import { Router } from '@angular/router';
 
 import { TagsInputComponent } from '@osf/shared/components/tags-input/tags-input.component';
 
 @Component({
   selector: 'osf-metadata-tags',
-  imports: [Card, TranslatePipe, TagsInputComponent],
+  imports: [Card, TranslatePipe, TagsInputComponent, Tag],
   templateUrl: './metadata-tags.component.html',
   styleUrl: './metadata-tags.component.scss',
   changeDetection: ChangeDetectionStrategy.OnPush,
 })
 export class MetadataTagsComponent {
   tags = input<string[]>([]);
+  readonly = input<boolean>(false);
+
   tagsChanged = output<string[]>();
+
+  private router = inject(Router);
+
+  tagClicked(tag: string) {
+    this.router.navigate(['/search'], { queryParams: { search: tag } });
+  }
 }
diff --git a/src/app/features/metadata/mappers/metadata.mapper.ts b/src/app/features/metadata/mappers/metadata.mapper.ts
index 23e7af32a..b4fbf9111 100644
--- a/src/app/features/metadata/mappers/metadata.mapper.ts
+++ b/src/app/features/metadata/mappers/metadata.mapper.ts
@@ -27,6 +27,7 @@ export class MetadataMapper {
       })),
       provider: response.embeds?.provider?.data.id,
       public: response.attributes.public,
+      currentUserPermissions: response.attributes.current_user_permissions,
     };
   }
 
diff --git a/src/app/features/metadata/metadata.component.html b/src/app/features/metadata/metadata.component.html
index becf23494..55e98a3ee 100644
--- a/src/app/features/metadata/metadata.component.html
+++ b/src/app/features/metadata/metadata.component.html
@@ -1,6 +1,6 @@
 <section class="flex flex-column flex-1">
   <osf-sub-header
-    [showButton]="true"
+    [showButton]="hasWriteAccess()"
     [buttonLabel]="'project.metadata.addCommunityMetadataRecord.title' | translate"
     [isButtonDisabled]="isLoading()"
     (buttonClick)="openAddRecord()"
@@ -13,6 +13,7 @@
     [selectedCedarTemplate]="selectedCedarTemplate()!"
     [selectedCedarRecord]="selectedCedarRecord()!"
     [cedarFormReadonly]="cedarFormReadonly()"
+    [canEdit]="hasWriteAccess()"
     (changeTab)="onTabChange($event)"
     (formSubmit)="onCedarFormSubmit($event)"
     (cedarFormChangeTemplate)="onCedarFormChangeTemplate()"
@@ -20,11 +21,16 @@
   >
     <div class="flex-column flex flex-1 w-full bg-white lg:flex-row">
       <div class="col-12 lg:col-6 flex flex-column gap-4">
-        <osf-metadata-title (openEditTitleDialog)="openEditTitleDialog()" [title]="metadata()?.title!" />
+        <osf-metadata-title
+          (openEditTitleDialog)="openEditTitleDialog()"
+          [title]="metadata()?.title!"
+          [readonly]="!hasWriteAccess()"
+        />
 
         <osf-metadata-description
           (openEditDescriptionDialog)="openEditDescriptionDialog()"
           [description]="metadata()?.description!"
+          [readonly]="!hasWriteAccess()"
         />
 
         <osf-metadata-date-info [dateCreated]="metadata()?.dateCreated" [dateModified]="metadata()?.dateModified" />
@@ -32,31 +38,39 @@
         <osf-metadata-contributors
           (openEditContributorDialog)="openEditContributorDialog()"
           [contributors]="bibliographicContributors()"
+          [readonly]="!hasWriteAccess()"
         />
 
         <osf-metadata-resource-information
           (openEditResourceInformationDialog)="openEditResourceInformationDialog()"
           (showResourceInfo)="onShowResourceInfo()"
           [customItemMetadata]="customItemMetadata()!"
+          [readonly]="!hasWriteAccess()"
         />
 
         <osf-metadata-funding
           (openEditFundingDialog)="openEditFundingDialog()"
           [funders]="customItemMetadata()?.funders!"
+          [readonly]="!hasWriteAccess()"
         />
 
         <osf-metadata-affiliated-institutions
           (openEditAffiliatedInstitutionsDialog)="openEditAffiliatedInstitutionsDialog()"
           [affiliatedInstitutions]="affiliatedInstitutions()"
+          [readonly]="!hasWriteAccess()"
         />
       </div>
 
       <div class="col-12 lg:col-6 flex flex-column gap-4">
-        <osf-metadata-license (openEditLicenseDialog)="openEditLicenseDialog()" [license]="metadata()?.license!" />
+        <osf-metadata-license
+          (openEditLicenseDialog)="openEditLicenseDialog()"
+          [license]="metadata()?.license!"
+          [readonly]="!hasWriteAccess()"
+        />
 
         <osf-metadata-publication-doi
           (openEditPublicationDoiDialog)="handleEditDoi()"
-          [hideEditDoi]="hideEditDoi()"
+          [hideEditDoi]="hideEditDoi() || !hasWriteAccess()"
           [identifiers]="metadata()?.identifiers!"
           [publicationDoi]="metadata()?.publicationDoi || null"
           [resourceType]="resourceType()"
@@ -66,7 +80,11 @@
           <osf-metadata-registration-doi [identifiers]="metadata()?.identifiers!"></osf-metadata-registration-doi>
         }
 
-        <osf-metadata-tags [tags]="metadata()?.tags || []" (tagsChanged)="onTagsChanged($event)"></osf-metadata-tags>
+        <osf-metadata-tags
+          [tags]="metadata()?.tags || []"
+          (tagsChanged)="onTagsChanged($event)"
+          [readonly]="!hasWriteAccess()"
+        ></osf-metadata-tags>
 
         <osf-metadata-subjects
           (getSubjectChildren)="getSubjectChildren($event)"
@@ -74,6 +92,7 @@
           (updateSelectedSubjects)="updateSelectedSubjects($event)"
           [isSubjectsUpdating]="isSubjectsUpdating()!"
           [selectedSubjects]="selectedSubjects()"
+          [readonly]="!hasAdminAccess()"
         />
       </div>
     </div>
diff --git a/src/app/features/metadata/metadata.component.ts b/src/app/features/metadata/metadata.component.ts
index 662c7f80a..05439abfd 100644
--- a/src/app/features/metadata/metadata.component.ts
+++ b/src/app/features/metadata/metadata.component.ts
@@ -21,7 +21,7 @@ import { ActivatedRoute, Router } from '@angular/router';
 
 import { ENVIRONMENT } from '@core/provider/environment.provider';
 import { MetadataTabsComponent, SubHeaderComponent } from '@osf/shared/components';
-import { MetadataResourceEnum, ResourceType } from '@osf/shared/enums';
+import { MetadataResourceEnum, ResourceType, UserPermissions } from '@osf/shared/enums';
 import { IS_MEDIUM } from '@osf/shared/helpers';
 import { MetadataTabsModel, SubjectModel } from '@osf/shared/models';
 import { CustomConfirmationService, ToastService } from '@osf/shared/services';
@@ -191,6 +191,18 @@ export class MetadataComponent implements OnInit {
 
   bibliographicContributors = computed(() => this.contributors().filter((contributor) => contributor.isBibliographic));
 
+  hasWriteAccess = computed(() => {
+    const metadata = this.metadata();
+    if (!metadata) return false;
+    return metadata.currentUserPermissions.includes(UserPermissions.Write);
+  });
+
+  hasAdminAccess = computed(() => {
+    const metadata = this.metadata();
+    if (!metadata) return false;
+    return metadata.currentUserPermissions.includes(UserPermissions.Admin);
+  });
+
   constructor() {
     effect(() => {
       const records = this.cedarRecords();
diff --git a/src/app/features/metadata/models/metadata-json-api.model.ts b/src/app/features/metadata/models/metadata-json-api.model.ts
index 0f8c235bd..ab1497b9e 100644
--- a/src/app/features/metadata/models/metadata-json-api.model.ts
+++ b/src/app/features/metadata/models/metadata-json-api.model.ts
@@ -1,4 +1,5 @@
 import { ApiData, InstitutionsJsonApiResponse, LicenseDataJsonApi, LicenseRecordJsonApi } from '@osf/shared/models';
+import { UserPermissions } from '@shared/enums';
 
 export interface MetadataJsonApiResponse {
   data: MetadataJsonApi;
@@ -17,6 +18,7 @@ export interface MetadataAttributesJsonApi {
   category?: string;
   node_license?: LicenseRecordJsonApi;
   public?: boolean;
+  current_user_permissions: UserPermissions[];
 }
 
 interface MetadataEmbedsJsonApi {
diff --git a/src/app/features/metadata/models/metadata.model.ts b/src/app/features/metadata/models/metadata.model.ts
index e7ad0f8cb..98b015c89 100644
--- a/src/app/features/metadata/models/metadata.model.ts
+++ b/src/app/features/metadata/models/metadata.model.ts
@@ -1,4 +1,5 @@
 import { Identifier, Institution, LicenseModel } from '@osf/shared/models';
+import { UserPermissions } from '@shared/enums';
 
 export interface Metadata {
   id: string;
@@ -20,6 +21,7 @@ export interface Metadata {
     year: string;
   };
   public?: boolean;
+  currentUserPermissions: UserPermissions[];
 }
 
 export interface CustomItemMetadataRecord {
diff --git a/src/app/features/project/overview/project-overview.component.html b/src/app/features/project/overview/project-overview.component.html
index 8d62be1f7..238841f18 100644
--- a/src/app/features/project/overview/project-overview.component.html
+++ b/src/app/features/project/overview/project-overview.component.html
@@ -17,7 +17,7 @@
       [isCollectionsRoute]="isCollectionsRoute()"
       [currentResource]="currentResource()"
       [projectDescription]="project.description"
-      [canEdit]="isAdmin"
+      [canEdit]="isAdmin()"
     />
   </div>
 
@@ -47,7 +47,7 @@
     }
 
     <div class="flex flex-column gap-4 left-section">
-      @if (isAdmin || canWrite) {
+      @if (canWrite()) {
         <osf-overview-wiki [resourceId]="currentProject()!.id" />
       }
 
@@ -57,8 +57,8 @@
         [areComponentsLoading]="areComponentsLoading()"
       />
 
-      <osf-project-components [canEdit]="canWrite && !isCollectionsRoute()" />
-      <osf-linked-resources [canEdit]="canWrite && !isCollectionsRoute()" />
+      <osf-project-components [canEdit]="canWrite() && !isCollectionsRoute()" />
+      <osf-linked-resources [canEdit]="canWrite() && !isCollectionsRoute()" />
       <osf-recent-activity-list [pageSize]="activityPageSize" />
     </div>
 
@@ -67,7 +67,7 @@
         [currentResource]="resourceOverview()"
         (customCitationUpdated)="onCustomCitationUpdated($event)"
         [isCollectionsRoute]="isCollectionsRoute()"
-        [canEdit]="canWrite"
+        [canEdit]="canWrite()"
       />
     </div>
   </div>
diff --git a/src/app/features/project/overview/project-overview.component.ts b/src/app/features/project/overview/project-overview.component.ts
index b769f0168..b62da3d7f 100644
--- a/src/app/features/project/overview/project-overview.component.ts
+++ b/src/app/features/project/overview/project-overview.component.ts
@@ -175,13 +175,13 @@ export class ProjectOverviewComponent implements OnInit {
   userPermissions = computed(() => this.currentProject()?.currentUserPermissions || []);
   hasViewOnly = computed(() => hasViewOnlyParam(this.router));
 
-  get isAdmin(): boolean {
+  isAdmin = computed(() => {
     return this.userPermissions().includes(UserPermissions.Admin);
-  }
+  });
 
-  get canWrite(): boolean {
+  canWrite = computed(() => {
     return this.userPermissions().includes(UserPermissions.Write);
-  }
+  });
 
   resourceOverview = computed(() => {
     const project = this.currentProject();
diff --git a/src/app/features/registry/components/registry-revisions/registry-revisions.component.html b/src/app/features/registry/components/registry-revisions/registry-revisions.component.html
index 7fd1d2b1a..ad7a78930 100644
--- a/src/app/features/registry/components/registry-revisions/registry-revisions.component.html
+++ b/src/app/features/registry/components/registry-revisions/registry-revisions.component.html
@@ -18,7 +18,7 @@
             />
           }
 
-          @if (!readonly()) {
+          @if (canEdit()) {
             @if (registryAcceptedUnapproved) {
               <p-button
                 class="w-full"
diff --git a/src/app/features/registry/components/registry-revisions/registry-revisions.component.ts b/src/app/features/registry/components/registry-revisions/registry-revisions.component.ts
index d78440d77..46b9930d4 100644
--- a/src/app/features/registry/components/registry-revisions/registry-revisions.component.ts
+++ b/src/app/features/registry/components/registry-revisions/registry-revisions.component.ts
@@ -24,7 +24,7 @@ export class RegistryRevisionsComponent {
   selectedRevisionIndex = input.required<number>();
   isSubmitting = input<boolean>(false);
   isModeration = input<boolean>(false);
-  readonly = input<boolean>(false);
+  canEdit = input<boolean>(false);
   openRevision = output<number>();
 
   readonly updateRegistration = output<string>();
diff --git a/src/app/features/registry/components/registry-statuses/registry-statuses.component.html b/src/app/features/registry/components/registry-statuses/registry-statuses.component.html
index 2fe915bd8..2e43324b4 100644
--- a/src/app/features/registry/components/registry-statuses/registry-statuses.component.html
+++ b/src/app/features/registry/components/registry-statuses/registry-statuses.component.html
@@ -12,8 +12,8 @@ <h3 class="font-normal">{{ 'registry.overview.statuses.' + registry()?.status +
             'registry.overview.statuses.' + registry()?.status + '.long' | translate: { embargoEndDate: embargoEndDate }
           }}
         </p>
-        @if (!readonly()) {
-          @if (canWithdraw) {
+        @if (canEdit()) {
+          @if (canWithdraw()) {
             <p-button
               (onClick)="openWithdrawDialog()"
               [label]="'registry.overview.withdrawRegistration' | translate"
@@ -21,7 +21,7 @@ <h3 class="font-normal">{{ 'registry.overview.statuses.' + registry()?.status +
               styleClass="w-full mt-2"
             ></p-button>
           }
-          @if (registry()?.status === RegistryStatus.Embargo) {
+          @if (isEmbargo()) {
             <p-button
               (onClick)="openEndEmbargoDialog()"
               severity="danger"
diff --git a/src/app/features/registry/components/registry-statuses/registry-statuses.component.ts b/src/app/features/registry/components/registry-statuses/registry-statuses.component.ts
index fbe00cf57..cdb90104a 100644
--- a/src/app/features/registry/components/registry-statuses/registry-statuses.component.ts
+++ b/src/app/features/registry/components/registry-statuses/registry-statuses.component.ts
@@ -6,7 +6,7 @@ import { Accordion, AccordionContent, AccordionHeader, AccordionPanel } from 'pr
 import { Button } from 'primeng/button';
 import { DialogService } from 'primeng/dynamicdialog';
 
-import { ChangeDetectionStrategy, Component, HostBinding, inject, input } from '@angular/core';
+import { ChangeDetectionStrategy, Component, computed, HostBinding, inject, input } from '@angular/core';
 
 import { RegistrationReviewStates, RegistryStatus, RevisionReviewStates } from '@osf/shared/enums';
 import { CustomConfirmationService } from '@osf/shared/services';
@@ -28,7 +28,7 @@ export class RegistryStatusesComponent {
   private readonly translateService = inject(TranslateService);
 
   registry = input.required<RegistryOverview | null>();
-  readonly = input<boolean>(false);
+  canEdit = input<boolean>(false);
   isModeration = input<boolean>(false);
 
   readonly RegistryStatus = RegistryStatus;
@@ -36,13 +36,13 @@ export class RegistryStatusesComponent {
   readonly customConfirmationService = inject(CustomConfirmationService);
   readonly actions = createDispatchMap({ makePublic: MakePublic });
 
-  get canWithdraw(): boolean {
+  canWithdraw = computed(() => {
     return this.registry()?.reviewsState === RegistrationReviewStates.Accepted && !this.isModeration();
-  }
+  });
 
-  get isEmbargo(): boolean {
+  isEmbargo = computed(() => {
     return this.registry()?.status === RegistryStatus.Embargo;
-  }
+  });
 
   get embargoEndDate() {
     const embargoEndDate = this.registry()?.embargoEndDate;
diff --git a/src/app/features/registry/pages/registry-overview/registry-overview.component.html b/src/app/features/registry/pages/registry-overview/registry-overview.component.html
index a5b0867c6..d0ec326a6 100644
--- a/src/app/features/registry/pages/registry-overview/registry-overview.component.html
+++ b/src/app/features/registry/pages/registry-overview/registry-overview.component.html
@@ -17,7 +17,7 @@
         <osf-overview-toolbar
           [currentResource]="toolbarResource()"
           [showViewOnlyLinks]="false"
-          [canEdit]="hasAdminAccess() || hasWriteAccess()"
+          [canEdit]="hasWriteAccess()"
         />
       </div>
     }
@@ -32,7 +32,7 @@
     </div>
   } @else {
     <div class="flex flex-column bg-white flex-1 p-4 gap-4">
-      @if (!schemaResponse()?.isOriginalResponse && !isInitialState && !hasViewOnly()) {
+      @if (!schemaResponse()?.isOriginalResponse && !isInitialState) {
         <p-message class="overview-message w-full" severity="warn">
           <ng-template #container>
             <div>
@@ -70,7 +70,7 @@ <h4 class="mb-1">
             <div class="flex flex-column gap-4 md:flex-row resource">
               <osf-registry-statuses
                 [registry]="registry()"
-                [readonly]="hasNoPermissions() || hasViewOnly()"
+                [canEdit]="hasAdminAccess()"
                 [isModeration]="isModeration"
               ></osf-registry-statuses>
 
@@ -82,7 +82,7 @@ <h4 class="mb-1">
                 (continueUpdate)="onContinueUpdateRegistration()"
                 [isModeration]="isModeration"
                 [isSubmitting]="isSchemaResponseLoading()"
-                [readonly]="hasNoPermissions() || hasViewOnly()"
+                [canEdit]="hasAdminAccess()"
               >
               </osf-registry-revisions>
             </div>
@@ -134,7 +134,7 @@ <h3 class="mb-2">{{ section.title }}</h3>
           <osf-resource-metadata
             [currentResource]="resourceOverview()"
             (customCitationUpdated)="onCustomCitationUpdated($event)"
-            [canEdit]="!hasViewOnly() && (hasWriteAccess() || hasAdminAccess())"
+            [canEdit]="hasWriteAccess()"
           />
         </div>
       </div>
diff --git a/src/app/features/registry/pages/registry-overview/registry-overview.component.ts b/src/app/features/registry/pages/registry-overview/registry-overview.component.ts
index 92a9c56e9..bfe6e1654 100644
--- a/src/app/features/registry/pages/registry-overview/registry-overview.component.ts
+++ b/src/app/features/registry/pages/registry-overview/registry-overview.component.ts
@@ -31,7 +31,7 @@ import {
   SubHeaderComponent,
   ViewOnlyLinkMessageComponent,
 } from '@osf/shared/components';
-import { RegistrationReviewStates, ResourceType, RevisionReviewStates } from '@osf/shared/enums';
+import { RegistrationReviewStates, ResourceType, RevisionReviewStates, UserPermissions } from '@osf/shared/enums';
 import { hasViewOnlyParam, toCamelCase } from '@osf/shared/helpers';
 import { MapRegistryOverview } from '@osf/shared/mappers';
 import { SchemaResponse, ToolbarResource } from '@osf/shared/models';
@@ -194,9 +194,17 @@ export class RegistryOverviewComponent {
   revisionId: string | null = null;
   isModeration = false;
 
-  userPermissions = computed(() => this.registry()?.currentUserPermissions || []);
   hasViewOnly = computed(() => hasViewOnlyParam(this.router));
 
+  canEdit = computed(() => {
+    const registry = this.registry();
+    if (!registry) return false;
+    return (
+      registry.currentUserPermissions.includes(UserPermissions.Admin) ||
+      registry.currentUserPermissions.includes(UserPermissions.Write)
+    );
+  });
+
   get isInitialState(): boolean {
     return this.registry()?.reviewsState === RegistrationReviewStates.Initial;
   }
diff --git a/src/app/features/registry/pages/registry-resources/registry-resources.component.html b/src/app/features/registry/pages/registry-resources/registry-resources.component.html
index 87516d8c7..d03ab0cab 100644
--- a/src/app/features/registry/pages/registry-resources/registry-resources.component.html
+++ b/src/app/features/registry/pages/registry-resources/registry-resources.component.html
@@ -1,6 +1,6 @@
 <osf-sub-header
   [title]="'resources.title' | translate"
-  [showButton]="true"
+  [showButton]="addButtonVisible()"
   [isButtonDisabled]="isAddingResource()"
   [buttonLabel]="'resources.add' | translate"
   (buttonClick)="addResource()"
@@ -35,23 +35,25 @@ <h2>{{ resourceName }}</h2>
             </div>
           </div>
 
-          <div class="flex gap-3 ml-auto w-full md:w-auto">
-            <p-button
-              class="w-full md:w-auto"
-              styleClass="w-full md:w-auto"
-              severity="secondary"
-              [label]="'common.buttons.edit' | translate"
-              (onClick)="updateResource(resource)"
-            ></p-button>
+          @if (canEdit()) {
+            <div class="flex gap-3 ml-auto w-full md:w-auto">
+              <p-button
+                class="w-full md:w-auto"
+                styleClass="w-full md:w-auto"
+                severity="secondary"
+                [label]="'common.buttons.edit' | translate"
+                (onClick)="updateResource(resource)"
+              ></p-button>
 
-            <p-button
-              class="w-full md:w-auto"
-              styleClass="w-full md:w-auto"
-              severity="danger"
-              [label]="'common.buttons.delete' | translate"
-              (onClick)="deleteResource(resource.id)"
-            ></p-button>
-          </div>
+              <p-button
+                class="w-full md:w-auto"
+                styleClass="w-full md:w-auto"
+                severity="danger"
+                [label]="'common.buttons.delete' | translate"
+                (onClick)="deleteResource(resource.id)"
+              ></p-button>
+            </div>
+          }
         </div>
       }
     </div>
diff --git a/src/app/features/registry/pages/registry-resources/registry-resources.component.ts b/src/app/features/registry/pages/registry-resources/registry-resources.component.ts
index ad5392f15..31373db97 100644
--- a/src/app/features/registry/pages/registry-resources/registry-resources.component.ts
+++ b/src/app/features/registry/pages/registry-resources/registry-resources.component.ts
@@ -7,12 +7,14 @@ import { DialogService } from 'primeng/dynamicdialog';
 
 import { filter, finalize, switchMap, take } from 'rxjs';
 
-import { ChangeDetectionStrategy, Component, DestroyRef, HostBinding, inject, signal } from '@angular/core';
+import { ChangeDetectionStrategy, Component, computed, DestroyRef, HostBinding, inject, signal } from '@angular/core';
 import { takeUntilDestroyed } from '@angular/core/rxjs-interop';
 import { ActivatedRoute } from '@angular/router';
 
+import { GetResourceMetadata, MetadataSelectors } from '@osf/features/metadata/store';
 import { IconComponent, LoadingSpinnerComponent, SubHeaderComponent } from '@osf/shared/components';
 import { CustomConfirmationService, ToastService } from '@osf/shared/services';
+import { ResourceType, UserPermissions } from '@shared/enums';
 
 import { AddResourceDialogComponent, EditResourceDialogComponent } from '../../components';
 import { RegistryResource } from '../../models';
@@ -43,24 +45,33 @@ export class RegistryResourcesComponent {
   readonly resources = select(RegistryResourcesSelectors.getResources);
   readonly isResourcesLoading = select(RegistryResourcesSelectors.isResourcesLoading);
   readonly currentResource = select(RegistryResourcesSelectors.getCurrentResource);
+  readonly registry = select(MetadataSelectors.getResourceMetadata);
 
-  registryId = '';
+  registryId = this.route.snapshot.parent?.params['id'];
   isAddingResource = signal(false);
   doiDomain = 'https://doi.org/';
 
   private readonly actions = createDispatchMap({
+    fetchRegistryData: GetResourceMetadata,
     getResources: GetRegistryResources,
     addResource: AddRegistryResource,
     deleteResource: DeleteResource,
   });
 
+  canEdit = computed(() => {
+    const registry = this.registry();
+    if (!registry) return false;
+
+    return registry.currentUserPermissions.includes(UserPermissions.Write);
+  });
+
+  addButtonVisible = computed(() => {
+    return !!this.registry()?.identifiers?.length && this.canEdit();
+  });
+
   constructor() {
-    this.route.parent?.params.pipe(takeUntilDestroyed(this.destroyRef)).subscribe((params) => {
-      this.registryId = params['id'];
-      if (this.registryId) {
-        this.actions.getResources(this.registryId);
-      }
-    });
+    this.actions.fetchRegistryData(this.registryId, ResourceType.Registration);
+    this.actions.getResources(this.registryId);
   }
 
   addResource() {
diff --git a/src/app/shared/components/metadata-tabs/metadata-tabs.component.html b/src/app/shared/components/metadata-tabs/metadata-tabs.component.html
index ab4d6984d..ac20b7f8f 100644
--- a/src/app/shared/components/metadata-tabs/metadata-tabs.component.html
+++ b/src/app/shared/components/metadata-tabs/metadata-tabs.component.html
@@ -21,7 +21,7 @@
                 [template]="selectedCedarTemplate()!"
                 [existingRecord]="selectedCedarRecord()!"
                 [readonly]="cedarFormReadonly()"
-                [showEditButton]="true"
+                [showEditButton]="canEdit()"
                 (emitData)="onCedarFormSubmit($event)"
                 (changeTemplate)="onCedarFormChangeTemplate()"
                 (editMode)="onCedarFormEdit()"
diff --git a/src/app/shared/components/metadata-tabs/metadata-tabs.component.ts b/src/app/shared/components/metadata-tabs/metadata-tabs.component.ts
index e2831678f..1470dafbc 100644
--- a/src/app/shared/components/metadata-tabs/metadata-tabs.component.ts
+++ b/src/app/shared/components/metadata-tabs/metadata-tabs.component.ts
@@ -28,6 +28,7 @@ export class MetadataTabsComponent {
   selectedCedarTemplate = input.required<CedarMetadataDataTemplateJsonApi>();
   selectedCedarRecord = input.required<CedarMetadataRecordData | null>();
   cedarFormReadonly = input<boolean>(true);
+  canEdit = input<boolean>(true);
   changeTab = output<string | number>();
   formSubmit = output<CedarRecordDataBinding>();
   cedarFormEdit = output<void>();
diff --git a/src/app/shared/components/registration-card/registration-card.component.html b/src/app/shared/components/registration-card/registration-card.component.html
index 1e8b6a990..11c0c6e64 100644
--- a/src/app/shared/components/registration-card/registration-card.component.html
+++ b/src/app/shared/components/registration-card/registration-card.component.html
@@ -55,23 +55,25 @@ <h2 class="align-self-center word-break-word">
             </div>
             <div class="flex gap-2 mt-1">
               @if (isDraft()) {
-                <p-button
-                  severity="primary"
-                  [label]="'common.buttons.review' | translate"
-                  [routerLink]="['/registries/drafts/', registrationData().id, 'review']"
-                  routerLinkActive="router-link-active"
-                ></p-button>
-                <p-button
-                  severity="secondary"
-                  [label]="'common.buttons.edit' | translate"
-                  [routerLink]="['/registries/drafts/', registrationData().id, 'metadata']"
-                ></p-button>
-                <p-button
-                  severity="danger"
-                  [label]="'common.buttons.delete' | translate"
-                  class="md:ml-auto"
-                  (onClick)="deleteDraft.emit(registrationData().id)"
-                ></p-button>
+                @if (hasAdminAccess) {
+                  <p-button
+                    severity="primary"
+                    [label]="'common.buttons.review' | translate"
+                    [routerLink]="['/registries/drafts/', registrationData().id, 'review']"
+                    routerLinkActive="router-link-active"
+                  />
+                  <p-button
+                    severity="secondary"
+                    [label]="'common.buttons.edit' | translate"
+                    [routerLink]="['/registries/drafts/', registrationData().id, 'metadata']"
+                  />
+                  <p-button
+                    severity="danger"
+                    [label]="'common.buttons.delete' | translate"
+                    class="md:ml-auto"
+                    (onClick)="deleteDraft.emit(registrationData().id)"
+                  />
+                }
               } @else {
                 <p-button
                   severity="primary"
diff --git a/src/app/shared/components/registration-card/registration-card.component.ts b/src/app/shared/components/registration-card/registration-card.component.ts
index 132450633..0456d733f 100644
--- a/src/app/shared/components/registration-card/registration-card.component.ts
+++ b/src/app/shared/components/registration-card/registration-card.component.ts
@@ -12,7 +12,7 @@ import { ChangeDetectionStrategy, Component, inject, input, output } from '@angu
 import { Router, RouterLink } from '@angular/router';
 
 import { CreateSchemaResponse, FetchAllSchemaResponses, RegistriesSelectors } from '@osf/features/registries/store';
-import { RegistrationReviewStates, RegistryStatus, RevisionReviewStates } from '@osf/shared/enums';
+import { RegistrationReviewStates, RevisionReviewStates, UserPermissions } from '@osf/shared/enums';
 import { RegistrationCard } from '@osf/shared/models';
 
 import { DataResourcesComponent } from '../data-resources/data-resources.component';
@@ -38,7 +38,6 @@ import { TruncatedTextComponent } from '../truncated-text/truncated-text.compone
   changeDetection: ChangeDetectionStrategy.OnPush,
 })
 export class RegistrationCardComponent {
-  RegistrationStatus = RegistryStatus;
   RevisionReviewStates = RevisionReviewStates;
   RegistrationReviewStates = RegistrationReviewStates;
   readonly isDraft = input<boolean>(false);
@@ -53,6 +52,10 @@ export class RegistrationCardComponent {
     createSchemaResponse: CreateSchemaResponse,
   });
 
+  get hasAdminAccess(): boolean {
+    return this.registrationData().currentUserPermissions.includes(UserPermissions.Admin);
+  }
+
   get isAccepted(): boolean {
     return this.registrationData().reviewsState === RegistrationReviewStates.Accepted;
   }
@@ -83,7 +86,7 @@ export class RegistrationCardComponent {
   }
 
   get showButtons(): boolean {
-    return this.isRootRegistration && (this.isAccepted || this.isPending || this.isEmbargo);
+    return this.isRootRegistration && (this.isAccepted || this.isPending || this.isEmbargo) && this.hasAdminAccess;
   }
 
   updateRegistration(id: string): void {
diff --git a/src/app/shared/mappers/registration/registration.mapper.ts b/src/app/shared/mappers/registration/registration.mapper.ts
index c09961357..923e22363 100644
--- a/src/app/shared/mappers/registration/registration.mapper.ts
+++ b/src/app/shared/mappers/registration/registration.mapper.ts
@@ -71,6 +71,7 @@ export class RegistrationMapper {
           id: contributor.id,
           fullName: contributor.embeds?.users?.data.attributes.full_name,
         })) || [],
+      currentUserPermissions: registration.attributes.current_user_permissions,
     };
   }
 
@@ -98,6 +99,7 @@ export class RegistrationMapper {
           fullName: contributor.embeds.users.data.attributes.full_name,
         })) || [],
       rootParentId: registration.relationships.root?.data?.id,
+      currentUserPermissions: registration.attributes.current_user_permissions,
     };
   }
 
diff --git a/src/app/shared/models/registration/registration-card.model.ts b/src/app/shared/models/registration/registration-card.model.ts
index 4e33569b2..625b4995d 100644
--- a/src/app/shared/models/registration/registration-card.model.ts
+++ b/src/app/shared/models/registration/registration-card.model.ts
@@ -1,4 +1,4 @@
-import { RegistrationReviewStates, RegistryStatus, RevisionReviewStates } from '@osf/shared/enums';
+import { RegistrationReviewStates, RegistryStatus, RevisionReviewStates, UserPermissions } from '@osf/shared/enums';
 
 import { ContributorModel } from '../contributors';
 
@@ -22,4 +22,5 @@ export interface RegistrationCard {
   hasPapers?: boolean;
   hasSupplements?: boolean;
   rootParentId?: string | null;
+  currentUserPermissions: UserPermissions[];
 }
diff --git a/src/app/shared/models/registration/registration-json-api.model.ts b/src/app/shared/models/registration/registration-json-api.model.ts
index 5e6d75b01..a02d6f8e8 100644
--- a/src/app/shared/models/registration/registration-json-api.model.ts
+++ b/src/app/shared/models/registration/registration-json-api.model.ts
@@ -1,4 +1,4 @@
-import { RegistrationReviewStates, RevisionReviewStates } from '@osf/shared/enums';
+import { RegistrationReviewStates, RevisionReviewStates, UserPermissions } from '@osf/shared/enums';
 
 import { ApiData, MetaJsonApi, PaginationLinksJsonApi } from '../common';
 import { LicenseRecordJsonApi } from '../licenses-json-api.model';
@@ -42,6 +42,7 @@ export interface DraftRegistrationAttributesJsonApi {
   tags: string[];
   title: string;
   public?: boolean;
+  current_user_permissions: UserPermissions[];
 }
 
 export interface RegistrationAttributesJsonApi {
@@ -64,6 +65,7 @@ export interface RegistrationAttributesJsonApi {
   pending_registration_approval: boolean;
   pending_embargo_approval: boolean;
   pending_embargo_termination_approval: boolean;
+  current_user_permissions: UserPermissions[];
 }
 
 export interface DraftRegistrationRelationshipsJsonApi {