diff --git a/packages/compass-aggregations/src/components/pipeline-toolbar/pipeline-header/pipeline-actions.tsx b/packages/compass-aggregations/src/components/pipeline-toolbar/pipeline-header/pipeline-actions.tsx
index 3126b22df41..556b20daa6b 100644
--- a/packages/compass-aggregations/src/components/pipeline-toolbar/pipeline-header/pipeline-actions.tsx
+++ b/packages/compass-aggregations/src/components/pipeline-toolbar/pipeline-header/pipeline-actions.tsx
@@ -23,8 +23,8 @@ import {
 import { isOutputStage } from '../../../utils/stage';
 import { openCreateIndexModal } from '../../../modules/insights';
 import {
-  usePreference,
   useIsAIFeatureEnabled,
+  usePreferences,
 } from 'compass-preferences-model/provider';
 import { showInput as showAIInput } from '../../../modules/pipeline-builder/pipeline-ai';
 import { useAssistantActions } from '@mongodb-js/compass-assistant';
@@ -85,10 +85,15 @@ export const PipelineActions: React.FunctionComponent<PipelineActionsProps> = ({
   onCollectionScanInsightActionButtonClick,
   stages,
 }) => {
-  const enableAggregationBuilderExtraOptions = usePreference(
-    'enableAggregationBuilderExtraOptions'
-  );
-  const showInsights = usePreference('showInsights');
+  const {
+    readWrite: preferencesReadWrite,
+    enableAggregationBuilderExtraOptions,
+    showInsights,
+  } = usePreferences([
+    'readWrite',
+    'enableAggregationBuilderExtraOptions',
+    'showInsights',
+  ]);
   const isAIFeatureEnabled = useIsAIFeatureEnabled();
   const { tellMoreAboutInsight } = useAssistantActions();
 
@@ -102,8 +107,15 @@ export const PipelineActions: React.FunctionComponent<PipelineActionsProps> = ({
           <SignalPopover
             signals={{
               ...PerformanceSignals.get('aggregation-executed-without-index'),
-              onPrimaryActionButtonClick:
-                onCollectionScanInsightActionButtonClick,
+              ...(preferencesReadWrite
+                ? {
+                    // Disable insight primary action if can't create indexes
+                    primaryActionButtonLabel: undefined,
+                  }
+                : {
+                    onPrimaryActionButtonClick:
+                      onCollectionScanInsightActionButtonClick,
+                  }),
               onAssistantButtonClick:
                 tellMoreAboutInsight &&
                 (() => {
diff --git a/packages/compass-collection/src/components/collection-header-actions/collection-header-actions.spec.tsx b/packages/compass-collection/src/components/collection-header-actions/collection-header-actions.spec.tsx
index 05ddc16c916..1c55645717c 100644
--- a/packages/compass-collection/src/components/collection-header-actions/collection-header-actions.spec.tsx
+++ b/packages/compass-collection/src/components/collection-header-actions/collection-header-actions.spec.tsx
@@ -3,16 +3,12 @@ import React, { type ComponentProps } from 'react';
 import {
   renderWithActiveConnection,
   screen,
-  cleanup,
 } from '@mongodb-js/testing-library-compass';
 import sinon from 'sinon';
 import {
   WorkspacesServiceProvider,
   type WorkspacesService,
 } from '@mongodb-js/compass-workspaces/provider';
-import type { PreferencesAccess } from 'compass-preferences-model';
-import { createSandboxFromDefaultPreferences } from 'compass-preferences-model';
-import { PreferencesProvider } from 'compass-preferences-model/provider';
 import { ExperimentTestName } from '@mongodb-js/compass-telemetry/provider';
 import { CompassExperimentationProvider } from '@mongodb-js/compass-telemetry';
 import type { ConnectionInfo } from '@mongodb-js/compass-connections/provider';
@@ -20,11 +16,9 @@ import type { ConnectionInfo } from '@mongodb-js/compass-connections/provider';
 import CollectionHeaderActions from '../collection-header-actions';
 
 describe('CollectionHeaderActions [Component]', function () {
-  let preferences: PreferencesAccess;
   let mockUseAssignment: sinon.SinonStub;
 
-  beforeEach(async function () {
-    preferences = await createSandboxFromDefaultPreferences();
+  beforeEach(function () {
     mockUseAssignment = sinon.stub();
     mockUseAssignment.returns({
       assignment: {
@@ -42,7 +36,8 @@ describe('CollectionHeaderActions [Component]', function () {
   const renderCollectionHeaderActions = (
     props: Partial<ComponentProps<typeof CollectionHeaderActions>> = {},
     workspaceService: Partial<WorkspacesService> = {},
-    connectionInfo?: ConnectionInfo
+    connectionInfo?: ConnectionInfo,
+    preferences?: Record<string, boolean>
   ) => {
     return renderWithActiveConnection(
       <CompassExperimentationProvider
@@ -53,21 +48,20 @@ describe('CollectionHeaderActions [Component]', function () {
         <WorkspacesServiceProvider
           value={workspaceService as WorkspacesService}
         >
-          <PreferencesProvider value={preferences}>
-            <CollectionHeaderActions
-              namespace="test.test"
-              isReadonly={false}
-              onOpenMockDataModal={sinon.stub()}
-              hasSchemaAnalysisData={true}
-              analyzedSchemaDepth={2}
-              schemaAnalysisStatus="complete"
-              schemaAnalysisError={null}
-              {...props}
-            />
-          </PreferencesProvider>
+          <CollectionHeaderActions
+            namespace="test.test"
+            isReadonly={false}
+            onOpenMockDataModal={sinon.stub()}
+            hasSchemaAnalysisData={true}
+            analyzedSchemaDepth={2}
+            schemaAnalysisStatus="complete"
+            schemaAnalysisError={null}
+            {...props}
+          />
         </WorkspacesServiceProvider>
       </CompassExperimentationProvider>,
-      connectionInfo
+      connectionInfo,
+      { preferences }
     );
   };
 
@@ -80,8 +74,6 @@ describe('CollectionHeaderActions [Component]', function () {
       });
     });
 
-    afterEach(cleanup);
-
     it('does not render any buttons', function () {
       expect(
         screen.queryByTestId('collection-header-actions-edit-button')
@@ -93,15 +85,18 @@ describe('CollectionHeaderActions [Component]', function () {
   });
 
   context('Compass readonly mode', function () {
-    it('does not render edit view buttons when in readonly mode', async function () {
-      await preferences.savePreferences({ readOnly: true });
-
-      await renderCollectionHeaderActions({
-        isReadonly: true,
-        namespace: 'db.coll2',
-        sourceName: 'db.someSource',
-        sourcePipeline: [{ $match: { a: 1 } }],
-      });
+    it('does not render edit view buttons when in ReadWrite mode', async function () {
+      await renderCollectionHeaderActions(
+        {
+          isReadonly: true,
+          namespace: 'db.coll2',
+          sourceName: 'db.someSource',
+          sourcePipeline: [{ $match: { a: 1 } }],
+        },
+        undefined,
+        undefined,
+        { readWrite: true }
+      );
 
       expect(
         screen.queryByTestId('collection-header-actions-edit-button')
@@ -142,8 +137,6 @@ describe('CollectionHeaderActions [Component]', function () {
       );
     });
 
-    afterEach(cleanup);
-
     it('shows a button to edit the view pipeline', function () {
       expect(
         screen.getByTestId('collection-header-actions-edit-button')
@@ -181,9 +174,6 @@ describe('CollectionHeaderActions [Component]', function () {
         }
       );
     });
-
-    afterEach(cleanup);
-
     it('shows a button to return to the view', function () {
       expect(
         screen.getByTestId('collection-header-actions-return-to-view-button')
diff --git a/packages/compass-collection/src/components/collection-header-actions/collection-header-actions.tsx b/packages/compass-collection/src/components/collection-header-actions/collection-header-actions.tsx
index 38ac74d9d84..613ab6375e0 100644
--- a/packages/compass-collection/src/components/collection-header-actions/collection-header-actions.tsx
+++ b/packages/compass-collection/src/components/collection-header-actions/collection-header-actions.tsx
@@ -89,8 +89,8 @@ const CollectionHeaderActions: React.FunctionComponent<
   const { id: connectionId, atlasMetadata } = connectionInfo;
   const { openCollectionWorkspace, openEditViewWorkspace, openShellWorkspace } =
     useOpenWorkspace();
-  const { readOnly: preferencesReadOnly, enableShell: showOpenShellButton } =
-    usePreferences(['readOnly', 'enableShell']);
+  const { readWrite: preferencesReadWrite, enableShell: showOpenShellButton } =
+    usePreferences(['readWrite', 'enableShell']);
   const track = useTelemetry();
 
   // Get experiment assignment for Mock Data Generator
@@ -119,6 +119,10 @@ const CollectionHeaderActions: React.FunctionComponent<
     !hasSchemaAnalysisData &&
     schemaAnalysisStatus !== SCHEMA_ANALYSIS_STATE_ANALYZING;
 
+  const isView = isReadonly && sourceName && !editViewName;
+
+  const showViewEdit = isView && !preferencesReadWrite;
+
   return (
     <div
       className={collectionHeaderActionsStyles}
@@ -198,7 +202,7 @@ const CollectionHeaderActions: React.FunctionComponent<
           Visualize Your Data
         </Button>
       )}
-      {isReadonly && sourceName && !editViewName && !preferencesReadOnly && (
+      {showViewEdit && (
         <Button
           data-testid="collection-header-actions-edit-button"
           size={ButtonSize.Small}
diff --git a/packages/compass-connections-navigation/src/connections-navigation-tree.tsx b/packages/compass-connections-navigation/src/connections-navigation-tree.tsx
index 0e6a375b430..47affec403b 100644
--- a/packages/compass-connections-navigation/src/connections-navigation-tree.tsx
+++ b/packages/compass-connections-navigation/src/connections-navigation-tree.tsx
@@ -21,7 +21,7 @@ import {
 } from '@mongodb-js/compass-components';
 import { useConnectable } from '@mongodb-js/compass-connections/provider';
 import type { WorkspaceTab } from '@mongodb-js/compass-workspaces';
-import { usePreference } from 'compass-preferences-model/provider';
+import { usePreferences } from 'compass-preferences-model/provider';
 import type { NavigationItemActions } from './item-actions';
 import {
   collectionItemActions,
@@ -56,12 +56,21 @@ const ConnectionsNavigationTree: React.FunctionComponent<
   onItemExpand,
   onItemAction,
 }) => {
-  const preferencesShellEnabled = usePreference('enableShell');
-  const preferencesReadOnly = usePreference('readOnly');
-  const isRenameCollectionEnabled = usePreference(
-    'enableRenameCollectionModal'
-  );
-  const showDisabledConnections = !!usePreference('showDisabledConnections');
+  const {
+    enableRenameCollectionModal,
+    enableShell: preferencesShellEnabled,
+    readOnly: preferencesReadOnly,
+    readWrite: preferencesReadWrite,
+    showDisabledConnections,
+  } = usePreferences([
+    'enableShell',
+    'readOnly',
+    'readWrite',
+    'enableRenameCollectionModal',
+    'showDisabledConnections',
+  ]);
+  const isRenameCollectionEnabled =
+    enableRenameCollectionModal && !preferencesReadWrite;
 
   const id = useId();
   const getConnectable = useConnectable();
@@ -71,9 +80,16 @@ const ConnectionsNavigationTree: React.FunctionComponent<
       connections,
       expandedItems: expanded,
       preferencesReadOnly,
+      preferencesReadWrite,
       preferencesShellEnabled,
     });
-  }, [connections, expanded, preferencesReadOnly, preferencesShellEnabled]);
+  }, [
+    connections,
+    expanded,
+    preferencesReadOnly,
+    preferencesReadWrite,
+    preferencesShellEnabled,
+  ]);
 
   const onDefaultAction: OnDefaultAction<SidebarActionableItem> = useCallback(
     (item, evt) => {
@@ -204,6 +220,7 @@ const ConnectionsNavigationTree: React.FunctionComponent<
           return {
             actions: databaseItemActions({
               hasWriteActionsDisabled: item.hasWriteActionsDisabled,
+              canDeleteDatabase: item.canDeleteDatabase,
             }),
           };
         default:
@@ -212,6 +229,7 @@ const ConnectionsNavigationTree: React.FunctionComponent<
               hasWriteActionsDisabled: item.hasWriteActionsDisabled,
               type: item.type,
               isRenameCollectionEnabled,
+              canEditCollection: item.canEditCollection,
             }),
           };
       }
@@ -268,6 +286,7 @@ const ConnectionsNavigationTree: React.FunctionComponent<
               isPerformanceTabAvailable,
               isPerformanceTabSupported,
               isAtlas: !!connectionInfo.atlasMetadata,
+              canDeleteDatabase: item.canDeleteDatabase,
             })
           );
         }
@@ -291,6 +310,7 @@ const ConnectionsNavigationTree: React.FunctionComponent<
               isPerformanceTabAvailable,
               isPerformanceTabSupported,
               isAtlas: !!connectionInfo.atlasMetadata,
+              canEditCollection: item.canEditCollection,
             })
           );
         }
diff --git a/packages/compass-connections-navigation/src/item-actions.ts b/packages/compass-connections-navigation/src/item-actions.ts
index 834c5174123..7642565f27c 100644
--- a/packages/compass-connections-navigation/src/item-actions.ts
+++ b/packages/compass-connections-navigation/src/item-actions.ts
@@ -164,36 +164,42 @@ export const notConnectedConnectionItemActions = ({
 
 export const databaseItemActions = ({
   hasWriteActionsDisabled,
+  canDeleteDatabase,
 }: {
   hasWriteActionsDisabled: boolean;
+  canDeleteDatabase: boolean;
 }): NavigationItemActions => {
   if (hasWriteActionsDisabled) {
     return [];
   }
-  return [
+  return stripNullActions([
     {
       action: 'create-collection',
       icon: 'Plus',
       label: 'Create collection',
     },
-    {
-      action: 'drop-database',
-      icon: 'Trash',
-      label: 'Drop database',
-    },
-  ];
+    canDeleteDatabase
+      ? {
+          action: 'drop-database',
+          icon: 'Trash',
+          label: 'Drop database',
+        }
+      : null,
+  ]);
 };
 
 export const collectionItemActions = ({
   hasWriteActionsDisabled,
+  canEditCollection,
   type,
   isRenameCollectionEnabled,
 }: {
   hasWriteActionsDisabled: boolean;
+  canEditCollection: boolean;
   type: 'collection' | 'view' | 'timeseries';
   isRenameCollectionEnabled: boolean;
 }): NavigationItemActions => {
-  const actions: NavigationItemActions = [
+  const actions: NullableNavigationItemActions = [
     {
       action: 'open-in-new-tab',
       label: 'Open in new tab',
@@ -202,33 +208,37 @@ export const collectionItemActions = ({
   ];
 
   if (hasWriteActionsDisabled) {
-    return actions;
+    return stripNullActions(actions);
   }
 
   if (type === 'view') {
     actions.push({ separator: true });
     actions.push(
-      {
-        action: 'drop-collection',
-        label: 'Drop view',
-        icon: 'Trash',
-      },
+      canEditCollection
+        ? {
+            action: 'drop-collection',
+            label: 'Drop view',
+            icon: 'Trash',
+          }
+        : null,
       {
         action: 'duplicate-view',
         label: 'Duplicate view',
         icon: 'Copy',
       },
-      {
-        action: 'modify-view',
-        label: 'Modify view',
-        icon: 'Edit',
-      }
+      canEditCollection
+        ? {
+            action: 'modify-view',
+            label: 'Modify view',
+            icon: 'Edit',
+          }
+        : null
     );
 
-    return actions;
+    return stripNullActions(actions);
   }
 
-  if (type !== 'timeseries' && isRenameCollectionEnabled) {
+  if (type !== 'timeseries' && canEditCollection && isRenameCollectionEnabled) {
     actions.push({ separator: true });
     actions.push({
       action: 'rename-collection',
@@ -237,13 +247,15 @@ export const collectionItemActions = ({
     });
   }
 
-  actions.push({
-    action: 'drop-collection',
-    label: 'Drop collection',
-    icon: 'Trash',
-  });
+  if (canEditCollection) {
+    actions.push({
+      action: 'drop-collection',
+      label: 'Drop collection',
+      icon: 'Trash',
+    });
+  }
 
-  return actions;
+  return stripNullActions(actions);
 };
 
 export const connectionContextMenuActions = ({
@@ -308,12 +320,14 @@ export const connectionContextMenuActions = ({
 
 export const databaseContextMenuActions = ({
   hasWriteActionsDisabled,
+  canDeleteDatabase,
   isShellEnabled,
   isPerformanceTabAvailable,
   isPerformanceTabSupported,
   isAtlas,
 }: {
   hasWriteActionsDisabled: boolean;
+  canDeleteDatabase: boolean;
   isShellEnabled: boolean;
   isPerformanceTabAvailable: boolean;
   isPerformanceTabSupported: boolean;
@@ -336,7 +350,7 @@ export const databaseContextMenuActions = ({
           icon: 'Plus',
           label: 'Create database',
         },
-    hasWriteActionsDisabled
+    hasWriteActionsDisabled && canDeleteDatabase
       ? null
       : {
           action: 'drop-database',
@@ -358,6 +372,7 @@ export const databaseContextMenuActions = ({
 
 export const collectionContextMenuActions = ({
   hasWriteActionsDisabled,
+  canEditCollection,
   type,
   isRenameCollectionEnabled,
   isPerformanceTabAvailable,
@@ -366,6 +381,7 @@ export const collectionContextMenuActions = ({
   isShellEnabled,
 }: {
   hasWriteActionsDisabled: boolean;
+  canEditCollection: boolean;
   type: 'collection' | 'view' | 'timeseries';
   isRenameCollectionEnabled: boolean;
   isShellEnabled: boolean;
@@ -385,7 +401,7 @@ export const collectionContextMenuActions = ({
   let writeActions: NavigationItemActions = [];
 
   if (!hasWriteActionsDisabled) {
-    if (type === 'view') {
+    if (type === 'view' && canEditCollection) {
       writeActions = [
         { separator: true },
         {
@@ -407,7 +423,7 @@ export const collectionContextMenuActions = ({
     } else {
       writeActions = stripNullActions([
         { separator: true },
-        type !== 'timeseries' && isRenameCollectionEnabled
+        type !== 'timeseries' && canEditCollection && isRenameCollectionEnabled
           ? {
               action: 'rename-collection',
               label: 'Rename collection',
@@ -419,11 +435,13 @@ export const collectionContextMenuActions = ({
           icon: 'Plus',
           label: 'Create collection',
         },
-        {
-          action: 'drop-collection',
-          label: 'Drop collection',
-          icon: 'Trash',
-        },
+        canEditCollection
+          ? {
+              action: 'drop-collection',
+              label: 'Drop collection',
+              icon: 'Trash',
+            }
+          : null,
       ]);
     }
   }
diff --git a/packages/compass-connections-navigation/src/tree-data.ts b/packages/compass-connections-navigation/src/tree-data.ts
index f8a2a65cc5a..9404479b067 100644
--- a/packages/compass-connections-navigation/src/tree-data.ts
+++ b/packages/compass-connections-navigation/src/tree-data.ts
@@ -103,6 +103,7 @@ export type DatabaseTreeItem = VirtualTreeItem & {
   connectionItem: ConnectedConnectionTreeItem;
   dbName: string;
   hasWriteActionsDisabled: boolean;
+  canDeleteDatabase: boolean;
   inferredFromPrivileges: boolean;
 };
 
@@ -115,6 +116,7 @@ export type CollectionTreeItem = VirtualTreeItem & {
   databaseItem: DatabaseTreeItem;
   namespace: string;
   hasWriteActionsDisabled: boolean;
+  canEditCollection: boolean;
   inferredFromPrivileges: boolean;
 };
 
@@ -180,6 +182,7 @@ const connectedConnectionToItems = ({
   connectionsLength,
   expandedItems = {},
   preferencesReadOnly,
+  preferencesReadWrite,
   preferencesShellEnabled,
 }: {
   connection: ConnectedConnection;
@@ -187,6 +190,7 @@ const connectedConnectionToItems = ({
   connectionsLength: number;
   expandedItems: Record<string, false | Record<string, boolean>>;
   preferencesReadOnly: boolean;
+  preferencesReadWrite: boolean;
   preferencesShellEnabled: boolean;
 }): SidebarTreeItem[] => {
   const isExpanded = !!expandedItems[connectionInfo.id];
@@ -250,6 +254,8 @@ const connectedConnectionToItems = ({
         databasesLength,
         databaseIndex,
         hasWriteActionsDisabled,
+        canDeleteDatabase: !preferencesReadWrite,
+        canEditCollection: !preferencesReadWrite,
       });
     })
   );
@@ -272,6 +278,8 @@ const databaseToItems = ({
   databaseIndex,
   databasesLength,
   hasWriteActionsDisabled,
+  canDeleteDatabase,
+  canEditCollection,
 }: {
   database: Database;
   connectionId: string;
@@ -282,6 +290,8 @@ const databaseToItems = ({
   databaseIndex: number;
   databasesLength: number;
   hasWriteActionsDisabled: boolean;
+  canDeleteDatabase: boolean;
+  canEditCollection: boolean;
 }): SidebarTreeItem[] => {
   const isExpanded = !!expandedItems[id];
   const databaseTI: DatabaseTreeItem = {
@@ -299,6 +309,7 @@ const databaseToItems = ({
     isExpandable: true,
     hasWriteActionsDisabled,
     inferredFromPrivileges,
+    canDeleteDatabase,
   };
 
   const sidebarData: SidebarTreeItem[] = [databaseTI];
@@ -341,6 +352,7 @@ const databaseToItems = ({
         hasWriteActionsDisabled,
         isExpandable: false,
         inferredFromPrivileges,
+        canEditCollection,
       })
     )
   );
@@ -359,11 +371,13 @@ export function getVirtualTreeItems({
   connections,
   expandedItems = {},
   preferencesReadOnly,
+  preferencesReadWrite,
   preferencesShellEnabled,
 }: {
   connections: (NotConnectedConnection | ConnectedConnection)[];
   expandedItems: Record<string, false | Record<string, boolean>>;
   preferencesReadOnly: boolean;
+  preferencesReadWrite: boolean;
   preferencesShellEnabled: boolean;
 }): SidebarTreeItem[] {
   return connections.flatMap((connection, connectionIndex) => {
@@ -374,6 +388,7 @@ export function getVirtualTreeItems({
         connectionIndex,
         connectionsLength: connections.length,
         preferencesReadOnly,
+        preferencesReadWrite,
         preferencesShellEnabled,
       });
     } else {
diff --git a/packages/compass-crud/src/components/document-list.tsx b/packages/compass-crud/src/components/document-list.tsx
index 90e3576c35d..e034a0e3f27 100644
--- a/packages/compass-crud/src/components/document-list.tsx
+++ b/packages/compass-crud/src/components/document-list.tsx
@@ -37,7 +37,7 @@ import {
   useIsLastAppliedQueryOutdated,
   useLastAppliedQuery,
 } from '@mongodb-js/compass-query-bar';
-import { usePreference } from 'compass-preferences-model/provider';
+import { usePreferences } from 'compass-preferences-model/provider';
 import { useAssistantActions } from '@mongodb-js/compass-assistant';
 
 // Table has its own scrollable container.
@@ -369,8 +369,12 @@ const DocumentList: React.FunctionComponent<DocumentListProps> = (props) => {
 
   const query = useLastAppliedQuery('crud');
   const outdated = useIsLastAppliedQueryOutdated('crud');
-  const preferencesReadOnly = usePreference('readOnly');
-  const isImportExportEnabled = usePreference('enableImportExport');
+
+  const {
+    readOnly: preferencesReadOnly,
+    readWrite: preferencesReadWrite,
+    enableImportExport: isImportExportEnabled,
+  } = usePreferences(['readOnly', 'readWrite', 'enableImportExport']);
 
   const isEditable =
     !preferencesReadOnly &&
@@ -556,6 +560,7 @@ const DocumentList: React.FunctionComponent<DocumentListProps> = (props) => {
               query: JSON.stringify(query.filter ?? {}),
               isCollectionScan: Boolean(isCollectionScan),
               isSearchIndexesSupported,
+              canCreateIndexes: !preferencesReadWrite,
               onCreateIndex: store.openCreateIndexModal.bind(store),
               onCreateSearchIndex: store.openCreateSearchIndexModal.bind(store),
               onAssistantButtonClick: tellMoreAboutInsight
diff --git a/packages/compass-crud/src/utils/toolbar-signal.ts b/packages/compass-crud/src/utils/toolbar-signal.ts
index 428fac6179c..46f860bfa80 100644
--- a/packages/compass-crud/src/utils/toolbar-signal.ts
+++ b/packages/compass-crud/src/utils/toolbar-signal.ts
@@ -7,6 +7,7 @@ export const getToolbarSignal = ({
   query,
   isCollectionScan,
   isSearchIndexesSupported,
+  canCreateIndexes,
   onCreateIndex,
   onCreateSearchIndex,
   onAssistantButtonClick,
@@ -14,6 +15,7 @@ export const getToolbarSignal = ({
   query: string;
   isCollectionScan: boolean;
   isSearchIndexesSupported: boolean;
+  canCreateIndexes: boolean;
   onCreateIndex: () => void;
   onCreateSearchIndex: () => void;
   onAssistantButtonClick?: () => void;
@@ -24,12 +26,16 @@ export const getToolbarSignal = ({
   if (/\$(text|regex)\b/.test(query) && isSearchIndexesSupported) {
     return {
       ...PerformanceSignals.get('atlas-text-regex-usage-in-query'),
-      onPrimaryActionButtonClick: onCreateSearchIndex,
+      ...(canCreateIndexes
+        ? { onPrimaryActionButtonClick: onCreateSearchIndex }
+        : { primaryActionButtonLabel: undefined }),
     };
   }
   return {
     ...PerformanceSignals.get('query-executed-without-index'),
-    onPrimaryActionButtonClick: onCreateIndex,
+    ...(canCreateIndexes
+      ? { onPrimaryActionButtonClick: onCreateIndex }
+      : { primaryActionButtonLabel: undefined }),
     onAssistantButtonClick,
   };
 };
diff --git a/packages/compass-e2e-tests/helpers/commands/set-feature.ts b/packages/compass-e2e-tests/helpers/commands/set-feature.ts
index fd24aa87729..7d37bede91e 100644
--- a/packages/compass-e2e-tests/helpers/commands/set-feature.ts
+++ b/packages/compass-e2e-tests/helpers/commands/set-feature.ts
@@ -15,13 +15,14 @@ export async function setFeature<K extends keyof UserPreferences>(
     // preferences so we use a global function.
     await browser.execute(
       async (_name, _value) => {
+        const kSandboxUpdateFn = Symbol.for(
+          '@compass-web-sandbox-update-preferences'
+        );
         const attributes: Partial<AllPreferences> = {
           [_name]: _value === null ? undefined : _value,
         };
         // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        await (globalThis as any).__compassWebE2ETestSavePreferences(
-          attributes
-        );
+        await (globalThis as any)[kSandboxUpdateFn]?.(attributes);
       },
       name,
       value
diff --git a/packages/compass-e2e-tests/helpers/insert-data.ts b/packages/compass-e2e-tests/helpers/insert-data.ts
index aa17255aad5..7846a504885 100644
--- a/packages/compass-e2e-tests/helpers/insert-data.ts
+++ b/packages/compass-e2e-tests/helpers/insert-data.ts
@@ -137,7 +137,8 @@ export async function createNestedDocumentsCollection(
 
 export async function createNumbersCollection(
   name = 'numbers',
-  numberOfRecords = 1000
+  numberOfRecords = 1000,
+  createView = false
 ): Promise<void> {
   await Promise.all(
     test_dbs.map(async (db) => {
@@ -146,6 +147,12 @@ export async function createNumbersCollection(
         .insertMany(
           [...Array(numberOfRecords).keys()].map((i) => ({ i, j: 0 }))
         );
+      if (createView) {
+        await db.createCollection(`${name}_view`, {
+          viewOn: name,
+          pipeline: [{ $match: { _id: { $exists: true } } }],
+        });
+      }
     })
   );
 }
diff --git a/packages/compass-e2e-tests/helpers/test-runner-context.ts b/packages/compass-e2e-tests/helpers/test-runner-context.ts
index 63aecdfc67e..03f23cb3213 100644
--- a/packages/compass-e2e-tests/helpers/test-runner-context.ts
+++ b/packages/compass-e2e-tests/helpers/test-runner-context.ts
@@ -344,10 +344,6 @@ process.env.HADRON_DISTRIBUTION ??= context.hadronDistribution;
 process.env.COMPASS_WEB_HTTP_PROXY_CLOUD_CONFIG ??=
   context.atlasCloudSandboxCloudConfig ?? 'dev';
 
-if (isTestingWeb()) {
-  process.env.E2E_TEST_CLOUD_WEB_ENABLE_PREFERENCE_SAVING ??= 'true';
-}
-
 const testServerVersion =
   process.env.MONGODB_VERSION ?? process.env.MONGODB_RUNNER_VERSION;
 
diff --git a/packages/compass-e2e-tests/tests/read-only.test.ts b/packages/compass-e2e-tests/tests/read-only.test.ts
index 69a444c78fd..7a4538ec904 100644
--- a/packages/compass-e2e-tests/tests/read-only.test.ts
+++ b/packages/compass-e2e-tests/tests/read-only.test.ts
@@ -2,7 +2,6 @@ import {
   init,
   cleanup,
   screenshotIfFailed,
-  skipForWeb,
   DEFAULT_CONNECTION_NAME_1,
 } from '../helpers/compass';
 import { expect } from 'chai';
@@ -10,15 +9,52 @@ import * as Selectors from '../helpers/selectors';
 import { createNumbersCollection } from '../helpers/insert-data';
 import type { Compass } from '../helpers/compass';
 import type { CompassBrowser } from '../helpers/compass-browser';
+import { isTestingWeb } from '../helpers/test-runner-context';
+
+async function setReadOnlyFeatureViaSettingsModal(
+  browser: CompassBrowser,
+  newValue: boolean
+) {
+  if (isTestingWeb()) {
+    // No settings modal in web
+    return browser.setFeature('readOnly', newValue);
+  }
+
+  await browser.openSettingsModal();
+  const settingsModal = browser.$(Selectors.SettingsModal);
+  await settingsModal.waitForDisplayed();
+
+  await browser.waitUntil(async () => {
+    await browser.clickVisible(Selectors.GeneralSettingsButton);
+
+    const featuresSettingsContent = browser.$(Selectors.GeneralSettingsContent);
+    const isFeaturesSettingsContentExisting =
+      await featuresSettingsContent.isExisting();
+
+    return isFeaturesSettingsContentExisting;
+  });
+
+  const currentValue =
+    (await browser
+      .$(Selectors.SettingsInputElement('readOnly'))
+      .getAttribute('aria-checked')) === 'true';
+
+  if (currentValue === newValue) {
+    // Trying to set to the same value, just close the modal
+    await browser.clickVisible(Selectors.CloseSettingsModalButton);
+  } else {
+    await browser.clickParent(Selectors.SettingsInputElement('readOnly'));
+    await browser.clickVisible(Selectors.SaveSettingsButton);
+  }
+
+  // wait for the modal to go away
+  await settingsModal.waitForDisplayed({ reverse: true });
+}
 
 describe('readOnly: true / Read-Only Edition', function () {
   let compass: Compass;
   let browser: CompassBrowser;
 
-  before(function () {
-    skipForWeb(this, 'settings modal not available on compass-web');
-  });
-
   beforeEach(async function () {
     compass = await init(this.test?.fullTitle());
     browser = compass.browser;
@@ -52,17 +88,12 @@ describe('readOnly: true / Read-Only Edition', function () {
         Selectors.CreateDatabaseButton,
         false
       )
-    ).to.be.equal(false);
-    await browser.openSettingsModal();
-    const settingsModal = browser.$(Selectors.SettingsModal);
-    await settingsModal.waitForDisplayed();
-    await browser.clickVisible(Selectors.GeneralSettingsButton);
-
-    await browser.clickParent(Selectors.SettingsInputElement('readOnly'));
-    await browser.clickVisible(Selectors.SaveSettingsButton);
+    ).to.be.equal(
+      false,
+      `Expected connection ${DEFAULT_CONNECTION_NAME_1} to NOT have "Create Database" button`
+    );
 
-    // wait for the modal to go away
-    await settingsModal.waitForDisplayed({ reverse: true });
+    await setReadOnlyFeatureViaSettingsModal(browser, false);
 
     await browser.navigateToConnectionTab(
       DEFAULT_CONNECTION_NAME_1,
@@ -75,7 +106,10 @@ describe('readOnly: true / Read-Only Edition', function () {
         Selectors.CreateDatabaseButton,
         false
       )
-    ).to.be.equal(true);
+    ).to.be.equal(
+      true,
+      `Expected connection ${DEFAULT_CONNECTION_NAME_1} to have "Create Database" button`
+    );
   });
 
   it('shows and hides the plus icon on the siderbar to create a collection', async function () {
@@ -100,23 +134,20 @@ describe('readOnly: true / Read-Only Edition', function () {
     );
     let isSidebarCreateCollectionButtonExisting =
       await sidebarCreateCollectionButton.isExisting();
-    expect(isSidebarCreateCollectionButtonExisting).to.be.equal(true);
-
-    await browser.openSettingsModal();
-    const settingsModal = browser.$(Selectors.SettingsModal);
-    await settingsModal.waitForDisplayed();
-    await browser.clickVisible(Selectors.GeneralSettingsButton);
-
-    await browser.clickParent(Selectors.SettingsInputElement('readOnly'));
-    await browser.clickVisible(Selectors.SaveSettingsButton);
+    expect(isSidebarCreateCollectionButtonExisting).to.be.equal(
+      true,
+      'Expected sidebar "Create Collection" button to exist'
+    );
 
-    // wait for the modal to go away
-    await settingsModal.waitForDisplayed({ reverse: true });
+    await setReadOnlyFeatureViaSettingsModal(browser, true);
 
     sidebarCreateCollectionButton = browser.$(Selectors.CreateCollectionButton);
     isSidebarCreateCollectionButtonExisting =
       await sidebarCreateCollectionButton.isExisting();
-    expect(isSidebarCreateCollectionButtonExisting).to.be.equal(false);
+    expect(isSidebarCreateCollectionButtonExisting).to.be.equal(
+      false,
+      'Expected sidebar "Create Collection" button to NOT exist'
+    );
   });
 
   it('shows and hides the create database button on the instance tab', async function () {
@@ -132,25 +163,22 @@ describe('readOnly: true / Read-Only Edition', function () {
     );
     let isInstanceCreateDatabaseButtonExisting =
       await instanceCreateDatabaseButton.isExisting();
-    expect(isInstanceCreateDatabaseButtonExisting).to.be.equal(true);
-
-    await browser.openSettingsModal();
-    const settingsModal = browser.$(Selectors.SettingsModal);
-    await settingsModal.waitForDisplayed();
-    await browser.clickVisible(Selectors.GeneralSettingsButton);
-
-    await browser.clickParent(Selectors.SettingsInputElement('readOnly'));
-    await browser.clickVisible(Selectors.SaveSettingsButton);
+    expect(isInstanceCreateDatabaseButtonExisting).to.be.equal(
+      true,
+      'Expected "Create Database" button in the MongoDB instance view to exist'
+    );
 
-    // wait for the modal to go away
-    await settingsModal.waitForDisplayed({ reverse: true });
+    await setReadOnlyFeatureViaSettingsModal(browser, true);
 
     instanceCreateDatabaseButton = browser.$(
       Selectors.InstanceCreateDatabaseButton
     );
     isInstanceCreateDatabaseButtonExisting =
       await instanceCreateDatabaseButton.isExisting();
-    expect(isInstanceCreateDatabaseButtonExisting).to.be.equal(false);
+    expect(isInstanceCreateDatabaseButtonExisting).to.be.equal(
+      false,
+      'Expected "Create Database" button in the MongoDB instance view to NOT exist'
+    );
   });
 
   it('shows and hides the create collection button on the instance tab', async function () {
@@ -167,25 +195,22 @@ describe('readOnly: true / Read-Only Edition', function () {
     );
     let isDatabaseCreateCollectionButtonExisting =
       await databaseCreateCollectionButton.isExisting();
-    expect(isDatabaseCreateCollectionButtonExisting).to.be.equal(true);
-
-    await browser.openSettingsModal();
-    const settingsModal = browser.$(Selectors.SettingsModal);
-    await settingsModal.waitForDisplayed();
-    await browser.clickVisible(Selectors.GeneralSettingsButton);
-
-    await browser.clickParent(Selectors.SettingsInputElement('readOnly'));
-    await browser.clickVisible(Selectors.SaveSettingsButton);
+    expect(isDatabaseCreateCollectionButtonExisting).to.be.equal(
+      true,
+      'Expected "Create Collection" button in the MongoDB instance view to exist'
+    );
 
-    // wait for the modal to go away
-    await settingsModal.waitForDisplayed({ reverse: true });
+    await setReadOnlyFeatureViaSettingsModal(browser, true);
 
     databaseCreateCollectionButton = browser.$(
       Selectors.DatabaseCreateCollectionButton
     );
     isDatabaseCreateCollectionButtonExisting =
       await databaseCreateCollectionButton.isExisting();
-    expect(isDatabaseCreateCollectionButtonExisting).to.be.equal(false);
+    expect(isDatabaseCreateCollectionButtonExisting).to.be.equal(
+      false,
+      'Expected "Create Collection" button in the MongoDB instance view to NOT exist'
+    );
   });
 
   it('shows and hides the add data button on the documents tab', async function () {
@@ -201,22 +226,19 @@ describe('readOnly: true / Read-Only Edition', function () {
 
     let addDataButton = browser.$(Selectors.AddDataButton);
     let isAddDataButtonExisting = await addDataButton.isExisting();
-    expect(isAddDataButtonExisting).to.be.equal(true);
-
-    await browser.openSettingsModal();
-    const settingsModal = browser.$(Selectors.SettingsModal);
-    await settingsModal.waitForDisplayed();
-    await browser.clickVisible(Selectors.GeneralSettingsButton);
-
-    await browser.clickParent(Selectors.SettingsInputElement('readOnly'));
-    await browser.clickVisible(Selectors.SaveSettingsButton);
+    expect(isAddDataButtonExisting).to.be.equal(
+      true,
+      'Expected "Add Data" button in the Documents view to exist'
+    );
 
-    // wait for the modal to go away
-    await settingsModal.waitForDisplayed({ reverse: true });
+    await setReadOnlyFeatureViaSettingsModal(browser, true);
 
     addDataButton = browser.$(Selectors.AddDataButton);
     isAddDataButtonExisting = await addDataButton.isExisting();
-    expect(isAddDataButtonExisting).to.be.equal(false);
+    expect(isAddDataButtonExisting).to.be.equal(
+      false,
+      'Expected "Add Data" button in the Documents view to NOT exist'
+    );
   });
 
   it('shows and hides the $out aggregation stage', async function () {
@@ -243,27 +265,7 @@ describe('readOnly: true / Read-Only Edition', function () {
     expect(options).to.include('$match');
     expect(options).to.include('$out');
 
-    await browser.openSettingsModal();
-    const settingsModal = browser.$(Selectors.SettingsModal);
-    await settingsModal.waitForDisplayed();
-
-    await browser.waitUntil(async () => {
-      await browser.clickVisible(Selectors.GeneralSettingsButton);
-
-      const featuresSettingsContent = browser.$(
-        Selectors.GeneralSettingsContent
-      );
-      const isFeaturesSettingsContentExisting =
-        await featuresSettingsContent.isExisting();
-
-      return isFeaturesSettingsContentExisting;
-    });
-
-    await browser.clickParent(Selectors.SettingsInputElement('readOnly'));
-    await browser.clickVisible(Selectors.SaveSettingsButton);
-
-    // wait for the modal to go away
-    await settingsModal.waitForDisplayed({ reverse: true });
+    await setReadOnlyFeatureViaSettingsModal(browser, true);
 
     await browser.focusStageOperator(0);
 
@@ -286,22 +288,19 @@ describe('readOnly: true / Read-Only Edition', function () {
 
     let createIndexButton = browser.$(Selectors.CreateIndexButton);
     let isCreateIndexButtonExisting = await createIndexButton.isExisting();
-    expect(isCreateIndexButtonExisting).to.be.equal(true);
-
-    await browser.openSettingsModal();
-    const settingsModal = browser.$(Selectors.SettingsModal);
-    await settingsModal.waitForDisplayed();
-    await browser.clickVisible(Selectors.GeneralSettingsButton);
-
-    await browser.clickParent(Selectors.SettingsInputElement('readOnly'));
-    await browser.clickVisible(Selectors.SaveSettingsButton);
+    expect(isCreateIndexButtonExisting).to.be.equal(
+      true,
+      'Expected "Create Index" button in the Indexes view to exist'
+    );
 
-    // wait for the modal to go away
-    await settingsModal.waitForDisplayed({ reverse: true });
+    await setReadOnlyFeatureViaSettingsModal(browser, true);
 
     createIndexButton = browser.$(Selectors.CreateIndexButton);
     isCreateIndexButtonExisting = await createIndexButton.isExisting();
-    expect(isCreateIndexButtonExisting).to.be.equal(false);
+    expect(isCreateIndexButtonExisting).to.be.equal(
+      false,
+      'Expected "Create Index" button in the Indexes view to NOT exist'
+    );
 
     const indexList = browser.$(Selectors.IndexList);
     const isIndexListExisting = await indexList.isExisting();
@@ -329,7 +328,10 @@ describe('readOnly: true / Read-Only Edition', function () {
 
     expect(
       await browser.$(Selectors.UpdateValidationButton).isExisting()
-    ).to.be.equal(true);
+    ).to.be.equal(
+      true,
+      'Expected "Update Validation" button in the Validation view to exist'
+    );
     expect(
       await browser
         .$(Selectors.ValidationActionSelector)
@@ -341,17 +343,14 @@ describe('readOnly: true / Read-Only Edition', function () {
         .getAttribute('aria-disabled')
     ).to.equal('false');
 
-    await browser.openSettingsModal();
-    const settingsModal = browser.$(Selectors.SettingsModal);
-    await settingsModal.waitForDisplayed();
-    await browser.clickVisible(Selectors.GeneralSettingsButton);
-
-    await browser.clickParent(Selectors.SettingsInputElement('readOnly'));
-    await browser.clickVisible(Selectors.SaveSettingsButton);
-
-    // wait for the modal to go away
-    await settingsModal.waitForDisplayed({ reverse: true });
+    await setReadOnlyFeatureViaSettingsModal(browser, true);
 
+    expect(
+      await browser.$(Selectors.UpdateValidationButton).isExisting()
+    ).to.be.equal(
+      false,
+      'Expected "Update Validation" button in the Validation view to NOT exist'
+    );
     expect(
       await browser
         .$(Selectors.ValidationActionSelector)
@@ -362,8 +361,5 @@ describe('readOnly: true / Read-Only Edition', function () {
         .$(Selectors.ValidationLevelSelector)
         .getAttribute('aria-disabled')
     ).to.equal('true');
-    expect(
-      await browser.$(Selectors.UpdateValidationButton).isExisting()
-    ).to.be.equal(false);
   });
 });
diff --git a/packages/compass-e2e-tests/tests/read-write.test.ts b/packages/compass-e2e-tests/tests/read-write.test.ts
new file mode 100644
index 00000000000..8bdc1ad2c4e
--- /dev/null
+++ b/packages/compass-e2e-tests/tests/read-write.test.ts
@@ -0,0 +1,205 @@
+import {
+  init,
+  cleanup,
+  screenshotIfFailed,
+  DEFAULT_CONNECTION_NAME_1,
+} from '../helpers/compass';
+import { expect } from 'chai';
+import * as Selectors from '../helpers/selectors';
+import { createNumbersCollection } from '../helpers/insert-data';
+import type { Compass } from '../helpers/compass';
+import type { CompassBrowser } from '../helpers/compass-browser';
+
+describe('readWrite: true', function () {
+  let compass: Compass;
+  let browser: CompassBrowser;
+  let connId: string;
+
+  beforeEach(async function () {
+    compass = await init(this.test?.fullTitle());
+    browser = compass.browser;
+    await browser.setFeature('readWrite', false);
+    await browser.setupDefaultConnections();
+    await createNumbersCollection('numbers', 1000, true);
+    await browser.connectToDefaults();
+    connId = await browser.getConnectionIdByName(DEFAULT_CONNECTION_NAME_1);
+  });
+
+  afterEach(async function () {
+    if (compass) {
+      await screenshotIfFailed(compass, this.currentTest);
+      await browser.setFeature('readWrite', false);
+      await cleanup(compass);
+    }
+  });
+
+  describe('in sidebar navigation', function () {
+    it('should hide delete / rename controls for databases and collections, modify for views', async function () {
+      await browser.setFeature('readWrite', true);
+
+      const dbItem = browser.$(Selectors.sidebarDatabase(connId, 'test'));
+
+      // Expand database list
+      await browser.clickVisible(dbItem);
+
+      const collItem = browser.$(
+        Selectors.sidebarCollection(connId, 'test', 'numbers')
+      );
+      const viewItem = browser.$(
+        Selectors.sidebarCollection(connId, 'test', 'numbers_view')
+      );
+
+      // Wait for collections to load
+      await Promise.all([
+        collItem.waitForDisplayed(),
+        viewItem.waitForDisplayed(),
+      ]);
+
+      // Check that drop db action is not available
+      expect(await dbItem.$('aria/Drop database').isExisting()).to.eq(
+        false,
+        'Expected "Drop database" button to NOT exist'
+      );
+
+      // For collections only "open in" action is left, so "Show actions"
+      // shouldn't be displayed
+      await browser.clickVisible(collItem);
+      expect(await collItem.$('aria/Show actions').isExisting()).to.eq(
+        false,
+        'Expected extended actions menu for collection to NOT exist (all items are hidden)'
+      );
+
+      await browser.clickVisible(viewItem);
+      await browser.clickVisible(viewItem.$('aria/Show actions'));
+      await viewItem.$('[role=menu]').waitForStable();
+
+      // For views you should still be able to duplicate them
+      await viewItem.$('aria/Duplicate view').waitForDisplayed({
+        timeoutMsg: 'Expected "Duplicate view" action item to exist',
+      });
+
+      // ... but everything else is not available
+      expect(await viewItem.$('aria/Drop view').isExisting()).to.eq(
+        false,
+        'Expected "Drop view" action item to NOT exist'
+      );
+      expect(await viewItem.$('aria/Modify view').isExisting()).to.eq(
+        false,
+        'Expected "Modify view" action item to NOT exist'
+      );
+    });
+  });
+
+  describe('in view workspace', function () {
+    it('should hide "Edit Pipeline" button', async function () {
+      await browser.navigateToCollectionTab(
+        DEFAULT_CONNECTION_NAME_1,
+        'test',
+        'numbers_view',
+        'Documents'
+      );
+
+      // Should exist before we switch the option
+      await browser.$('aria/Edit Pipeline').waitForDisplayed({
+        timeoutMsg: 'Expected "Edit Pipeline" action item to exist',
+      });
+
+      void browser.setFeature('readWrite', true);
+
+      // Should be hidden after that
+      await browser.$('aria/Edit Pipeline').waitForExist({
+        reverse: true,
+        timeoutMsg: 'Expected "Edit Pipeline" action item to NOT exist',
+      });
+    });
+  });
+
+  describe('in Indexes collection sub tab', function () {
+    it('should hide "Create Index" controls', async function () {
+      await browser.navigateToCollectionTab(
+        DEFAULT_CONNECTION_NAME_1,
+        'test',
+        'numbers',
+        'Indexes'
+      );
+
+      let createIndexButtonLabel = 'Create';
+
+      // Should exist before we switch the option
+      try {
+        await browser.$(`aria/${createIndexButtonLabel}`).waitForDisplayed({
+          timeout: 10_000,
+          timeoutMsg: 'Expected "Create" button to exist',
+        });
+      } catch {
+        createIndexButtonLabel = 'Create Index';
+        await browser.$(`aria/${createIndexButtonLabel}`).waitForDisplayed({
+          timeoutMsg: 'Expected "Create" or "Create Index" button to exist',
+        });
+      }
+
+      void browser.setFeature('readWrite', true);
+
+      // Should be hidden after that
+      await browser.$(`aria/${createIndexButtonLabel}`).waitForExist({
+        reverse: true,
+        timeoutMsg: `Expected "${createIndexButtonLabel}" button to NOT exist`,
+      });
+    });
+  });
+
+  describe('when "no index" insight is displayed', function () {
+    it('should not show the Create Index button on Documents page', async function () {
+      await browser.navigateToCollectionTab(
+        DEFAULT_CONNECTION_NAME_1,
+        'test',
+        'numbers',
+        'Documents'
+      );
+      await browser.runFindOperation('Documents', '{ i: 1 }', {
+        waitForResult: true,
+      });
+
+      await browser.$(Selectors.InsightIconButton).waitForDisplayed();
+      await browser.clickVisible(Selectors.InsightIconButton);
+      await browser.$('aria/Create index').waitForDisplayed({
+        timeoutMsg: 'Expected "Create index" action button to exist',
+      });
+
+      void browser.setFeature('readWrite', true);
+
+      await browser.$('aria/Create index').waitForDisplayed({
+        reverse: true,
+        timeoutMsg: 'Expected "Create index" action button to NOT exist',
+      });
+    });
+
+    it('should not show the Create Index button on Aggregations page', async function () {
+      await browser.navigateToCollectionTab(
+        DEFAULT_CONNECTION_NAME_1,
+        'test',
+        'numbers',
+        'Aggregations'
+      );
+      await browser.clickVisible(Selectors.AddStageButton);
+      await browser.selectStageOperator(0, '$match');
+      await browser.setCodemirrorEditorValue(
+        Selectors.stageEditor(0),
+        '{ i: 1 }'
+      );
+
+      await browser.$(Selectors.InsightIconButton).waitForDisplayed();
+      await browser.clickVisible(Selectors.InsightIconButton);
+      await browser.$('aria/Create index').waitForDisplayed({
+        timeoutMsg: 'Expected "Create index" action button to exist',
+      });
+
+      void browser.setFeature('readWrite', true);
+
+      await browser.$('aria/Create index').waitForDisplayed({
+        reverse: true,
+        timeoutMsg: 'Expected "Create index" action button to NOT exist',
+      });
+    });
+  });
+});
diff --git a/packages/compass-indexes/src/components/indexes-toolbar/indexes-toolbar.spec.tsx b/packages/compass-indexes/src/components/indexes-toolbar/indexes-toolbar.spec.tsx
index 2d0d296635e..0d97d612ea9 100644
--- a/packages/compass-indexes/src/components/indexes-toolbar/indexes-toolbar.spec.tsx
+++ b/packages/compass-indexes/src/components/indexes-toolbar/indexes-toolbar.spec.tsx
@@ -1,6 +1,5 @@
 import React from 'react';
 import {
-  cleanup,
   render,
   screen,
   within,
@@ -10,57 +9,42 @@ import { expect } from 'chai';
 import sinon from 'sinon';
 
 import { IndexesToolbar } from './indexes-toolbar';
-import type { PreferencesAccess } from 'compass-preferences-model';
-import { createSandboxFromDefaultPreferences } from 'compass-preferences-model';
-import { PreferencesProvider } from 'compass-preferences-model/provider';
 import type { Document } from 'mongodb';
 
 describe('IndexesToolbar Component', function () {
-  before(cleanup);
-  afterEach(cleanup);
-
-  let preferences: PreferencesAccess;
-  beforeEach(async function () {
-    preferences = await createSandboxFromDefaultPreferences();
-  });
-
   const renderIndexesToolbar = (
-    props: Partial<React.ComponentProps<typeof IndexesToolbar>> = {}
+    props: Partial<React.ComponentProps<typeof IndexesToolbar>> = {},
+    preferences = {}
   ) => {
     render(
-      <PreferencesProvider value={preferences}>
-        <IndexesToolbar
-          indexView="regular-indexes"
-          hasTooManyIndexes={false}
-          errorMessage={null}
-          isReadonlyView={false}
-          readOnly={false}
-          isWritable={true}
-          writeStateDescription={undefined}
-          onRefreshIndexes={() => {}}
-          isSearchIndexesSupported={false}
-          isRefreshing={false}
-          collectionStats={{ index_count: 0, index_size: 0, pipeline: [] }}
-          onIndexViewChanged={() => {}}
-          onCreateRegularIndexClick={() => {}}
-          onCreateSearchIndexClick={() => {}}
-          namespace=""
-          showAtlasSearchLink={false}
-          serverVersion={'8.0.11'}
-          {...props}
-        />
-      </PreferencesProvider>
+      <IndexesToolbar
+        indexView="regular-indexes"
+        hasTooManyIndexes={false}
+        errorMessage={null}
+        isReadonlyView={false}
+        readOnly={false}
+        isWritable={true}
+        writeStateDescription={undefined}
+        onRefreshIndexes={() => {}}
+        isSearchIndexesSupported={false}
+        isRefreshing={false}
+        collectionStats={{ index_count: 0, index_size: 0, pipeline: [] }}
+        onIndexViewChanged={() => {}}
+        onCreateRegularIndexClick={() => {}}
+        onCreateSearchIndexClick={() => {}}
+        namespace=""
+        showAtlasSearchLink={false}
+        serverVersion={'8.0.11'}
+        {...props}
+      />,
+      { preferences }
     );
   };
 
   describe('when rendered', function () {
     describe('with atlas search index management is disabled', function () {
-      beforeEach(async function () {
-        await preferences.savePreferences({
-          showInsights: true,
-        });
-
-        renderIndexesToolbar({});
+      beforeEach(function () {
+        renderIndexesToolbar({}, { showInsights: true });
       });
 
       it('should render the create index button enabled', function () {
@@ -75,12 +59,13 @@ describe('IndexesToolbar Component', function () {
 
     describe('with atlas search index management is enabled', function () {
       describe('when cluster has Atlas Search available', function () {
-        beforeEach(async function () {
-          await preferences.savePreferences({
-            showInsights: true,
-          });
-
-          renderIndexesToolbar({ isSearchIndexesSupported: true });
+        beforeEach(function () {
+          renderIndexesToolbar(
+            { isSearchIndexesSupported: true },
+            {
+              showInsights: true,
+            }
+          );
         });
 
         it('should render the create index dropdown button enabled', async function () {
@@ -100,12 +85,11 @@ describe('IndexesToolbar Component', function () {
       });
 
       describe('when cluster does not support Atlas Search', function () {
-        beforeEach(async function () {
-          await preferences.savePreferences({
-            showInsights: true,
-          });
-
-          renderIndexesToolbar({ isSearchIndexesSupported: false });
+        beforeEach(function () {
+          renderIndexesToolbar(
+            { isSearchIndexesSupported: false },
+            { showInsights: true }
+          );
         });
 
         it('should render the create index button only', function () {
@@ -189,11 +173,9 @@ describe('IndexesToolbar Component', function () {
     });
   });
 
-  describe('when it is preferences ReadOnly', function () {
+  describe('when it is preferences ReadWrite', function () {
     beforeEach(function () {
-      renderIndexesToolbar({
-        readOnly: true,
-      });
+      renderIndexesToolbar(undefined, { readWrite: true });
     });
 
     it('should not render the create index button', function () {
@@ -353,19 +335,18 @@ describe('IndexesToolbar Component', function () {
   describe('segment control', function () {
     let onChangeViewCallback: sinon.SinonSpy;
 
-    beforeEach(async function () {
-      await preferences.savePreferences({
-        showInsights: true,
-      });
-
+    beforeEach(function () {
       onChangeViewCallback = sinon.spy();
     });
 
     it('when it supports search management, it changes tab view', function () {
-      renderIndexesToolbar({
-        isSearchIndexesSupported: true,
-        onIndexViewChanged: onChangeViewCallback,
-      });
+      renderIndexesToolbar(
+        {
+          isSearchIndexesSupported: true,
+          onIndexViewChanged: onChangeViewCallback,
+        },
+        { showInsights: true }
+      );
       const segmentControl = screen.getByText('Search Indexes');
       userEvent.click(segmentControl);
 
@@ -374,10 +355,13 @@ describe('IndexesToolbar Component', function () {
     });
 
     it('when it does not support search management, it renders tab as disabled', function () {
-      renderIndexesToolbar({
-        isSearchIndexesSupported: false,
-        onIndexViewChanged: onChangeViewCallback,
-      });
+      renderIndexesToolbar(
+        {
+          isSearchIndexesSupported: false,
+          onIndexViewChanged: onChangeViewCallback,
+        },
+        { showInsights: true }
+      );
       const segmentControl = screen.getByText('Search Indexes');
       userEvent.click(segmentControl);
 
diff --git a/packages/compass-indexes/src/components/indexes-toolbar/indexes-toolbar.tsx b/packages/compass-indexes/src/components/indexes-toolbar/indexes-toolbar.tsx
index 52a3cd900fd..b98b5baa9aa 100644
--- a/packages/compass-indexes/src/components/indexes-toolbar/indexes-toolbar.tsx
+++ b/packages/compass-indexes/src/components/indexes-toolbar/indexes-toolbar.tsx
@@ -1,9 +1,6 @@
 import React, { useCallback } from 'react';
 import { connect } from 'react-redux';
-import {
-  usePreference,
-  withPreferences,
-} from 'compass-preferences-model/provider';
+import { usePreferences } from 'compass-preferences-model/provider';
 import {
   Button,
   css,
@@ -107,18 +104,21 @@ export const IndexesToolbar: React.FunctionComponent<IndexesToolbarProps> = ({
   onRefreshIndexes,
   onIndexViewChanged,
   serverVersion,
-  readOnly, // preferences readOnly.
   collectionStats,
 }) => {
-  const isSearchManagementActive = usePreference('enableAtlasSearchIndexes');
+  const {
+    readWrite: preferencesReadWrite,
+    enableAtlasSearchIndexes: isSearchManagementActive,
+    showInsights: preferencesShowInsights,
+  } = usePreferences(['readWrite', 'enableAtlasSearchIndexes', 'showInsights']);
   const { atlasMetadata } = useConnectionInfo();
-  const showInsights = usePreference('showInsights') && !errorMessage;
+  const showInsights = preferencesShowInsights && !errorMessage;
   const showCreateIndexButton =
     (!isReadonlyView ||
       VIEW_PIPELINE_UTILS.isVersionSearchCompatibleForViewsCompass(
         serverVersion
       )) &&
-    !readOnly &&
+    !preferencesReadWrite &&
     !errorMessage;
   const refreshButtonIcon = isRefreshing ? (
     <div className={spinnerStyles}>
@@ -411,7 +411,4 @@ const mapDispatch = {
   onIndexViewChanged: indexViewChanged,
 };
 
-export default connect(
-  mapState,
-  mapDispatch
-)(withPreferences(IndexesToolbar, ['readOnly']));
+export default connect(mapState, mapDispatch)(IndexesToolbar);
diff --git a/packages/compass-indexes/src/components/regular-indexes-table/regular-indexes-table.tsx b/packages/compass-indexes/src/components/regular-indexes-table/regular-indexes-table.tsx
index a331a12ab89..565d122d0c6 100644
--- a/packages/compass-indexes/src/components/regular-indexes-table/regular-indexes-table.tsx
+++ b/packages/compass-indexes/src/components/regular-indexes-table/regular-indexes-table.tsx
@@ -1,6 +1,6 @@
 import React, { useMemo, useEffect } from 'react';
 import { connect } from 'react-redux';
-import { withPreferences } from 'compass-preferences-model/provider';
+import { usePreference } from 'compass-preferences-model/provider';
 import { useWorkspaceTabId } from '@mongodb-js/compass-workspaces/provider';
 import { IndexKeysBadge } from '@mongodb-js/compass-components';
 import type {
@@ -380,7 +380,6 @@ export const RegularIndexesTable: React.FunctionComponent<
   RegularIndexesTableProps
 > = ({
   isWritable,
-  readOnly,
   indexes,
   inProgressIndexes,
   rollingIndexes,
@@ -394,6 +393,7 @@ export const RegularIndexesTable: React.FunctionComponent<
   error,
 }) => {
   const tabId = useWorkspaceTabId();
+  const preferencesReadWrite = usePreference('readWrite');
 
   useEffect(() => {
     onRegularIndexesOpened(tabId);
@@ -455,7 +455,7 @@ export const RegularIndexesTable: React.FunctionComponent<
     return null;
   }
 
-  const canModifyIndex = isWritable && !readOnly;
+  const canModifyIndex = isWritable && !preferencesReadWrite;
 
   return (
     <IndexesTable
@@ -489,7 +489,4 @@ const mapDispatch = {
   onRegularIndexesClosed: stopPollingRegularIndexes,
 };
 
-export default connect(
-  mapState,
-  mapDispatch
-)(withPreferences(RegularIndexesTable, ['readOnly']));
+export default connect(mapState, mapDispatch)(RegularIndexesTable);
diff --git a/packages/compass-indexes/src/components/search-indexes-table/search-indexes-table.tsx b/packages/compass-indexes/src/components/search-indexes-table/search-indexes-table.tsx
index 8d04864c0f1..e29bae57e48 100644
--- a/packages/compass-indexes/src/components/search-indexes-table/search-indexes-table.tsx
+++ b/packages/compass-indexes/src/components/search-indexes-table/search-indexes-table.tsx
@@ -2,7 +2,7 @@ import React, { useMemo, useEffect } from 'react';
 import { connect } from 'react-redux';
 import type { Document } from 'mongodb';
 import type { SearchIndex, SearchIndexStatus } from 'mongodb-data-service';
-import { withPreferences } from 'compass-preferences-model/provider';
+import { usePreference } from 'compass-preferences-model/provider';
 import { useOpenWorkspace } from '@mongodb-js/compass-workspaces/provider';
 import {
   Badge,
@@ -301,7 +301,6 @@ export const SearchIndexesTable: React.FunctionComponent<
   indexes,
   isWritable,
   collectionStats,
-  readOnly,
   status,
   onOpenCreateModalClick,
   onEditIndexClick,
@@ -310,6 +309,7 @@ export const SearchIndexesTable: React.FunctionComponent<
   onSearchIndexesClosed,
   isReadonlyView,
 }) => {
+  const preferencesReadWrite = usePreference('readWrite');
   const { openCollectionWorkspace } = useOpenWorkspace();
   const { id: connectionId } = useConnectionInfo();
 
@@ -417,7 +417,7 @@ export const SearchIndexesTable: React.FunctionComponent<
     );
   }
 
-  const canModifyIndex = isWritable && !readOnly;
+  const canModifyIndex = isWritable && !preferencesReadWrite;
 
   return (
     <IndexesTable
@@ -452,7 +452,4 @@ const mapDispatch = {
   onSearchIndexesClosed: stopPollingSearchIndexes,
 };
 
-export default connect(
-  mapState,
-  mapDispatch
-)(withPreferences(SearchIndexesTable, ['readOnly']));
+export default connect(mapState, mapDispatch)(SearchIndexesTable);
diff --git a/packages/compass-preferences-model/src/compass-web-preferences-access.ts b/packages/compass-preferences-model/src/compass-web-preferences-access.ts
index 48b4fe92b63..2a1edc99ac5 100644
--- a/packages/compass-preferences-model/src/compass-web-preferences-access.ts
+++ b/packages/compass-preferences-model/src/compass-web-preferences-access.ts
@@ -5,22 +5,6 @@ import { type AllPreferences } from './preferences-schema';
 import { InMemoryStorage } from './preferences-in-memory-storage';
 import { getActiveUser } from './utils';
 
-const editablePreferences: (keyof UserPreferences)[] = [
-  // Value can change from false to true during allocation / checking
-  'optInGenAIFeatures',
-  'cloudFeatureRolloutAccess',
-  // TODO(COMPASS-9353): Provide a standard for updating Compass preferences in web
-  'enableIndexesGuidanceExp',
-  'showIndexesGuidanceVariant',
-
-  // Exposed for testing purposes.
-  'enableGenAISampleDocumentPassing',
-  'enableGenAIFeaturesAtlasOrg',
-  'enableGenAIFeaturesAtlasProject',
-  'enableDataModeling',
-  'enableMyQueries',
-];
-
 export class CompassWebPreferencesAccess implements PreferencesAccess {
   private _preferences: Preferences;
   constructor(preferencesOverrides?: Partial<AllPreferences>) {
@@ -31,16 +15,7 @@ export class CompassWebPreferencesAccess implements PreferencesAccess {
   }
 
   savePreferences(_attributes: Partial<UserPreferences>) {
-    // Only allow runtime updating certain preferences.
-    if (
-      Object.keys(_attributes).length >= 1 &&
-      Object.keys(_attributes).every((attribute) =>
-        editablePreferences.includes(attribute as keyof UserPreferences)
-      )
-    ) {
-      return Promise.resolve(this._preferences.savePreferences(_attributes));
-    }
-    return Promise.resolve(this._preferences.getPreferences());
+    return this._preferences.savePreferences(_attributes);
   }
 
   refreshPreferences() {
diff --git a/packages/compass-preferences-model/src/preferences-schema.tsx b/packages/compass-preferences-model/src/preferences-schema.tsx
index a14c23463e5..7e3c2f283bf 100644
--- a/packages/compass-preferences-model/src/preferences-schema.tsx
+++ b/packages/compass-preferences-model/src/preferences-schema.tsx
@@ -61,6 +61,7 @@ export type UserConfigurablePreferences = PermanentFeatureFlags &
     enableFeedbackPanel: boolean;
     networkTraffic: boolean;
     readOnly: boolean;
+    readWrite: boolean;
     enableShell: boolean;
     enableDbAndCollStats: boolean;
     protectConnectionStrings?: boolean;
@@ -505,6 +506,23 @@ export const storedUserPreferencesProps: Required<{
     validator: z.boolean().default(false),
     type: 'boolean',
   },
+  /**
+   * Removes "admin" features like editing indexes or dropping / renaming
+   * databases. Somewhat matches Atlas "Project Data Access Read Write" user
+   * role
+   */
+  readWrite: {
+    ui: true,
+    cli: false,
+    global: false,
+    description: {
+      short: 'Set Read-Write Mode',
+      long: 'Limit Compass to data read write operations only, with cababilities like renaming / dropping namespaces or editing indexes removed.',
+    },
+    deriveValue: deriveReadOnlyOptionState('readWrite', true),
+    validator: z.boolean().default(false),
+    type: 'boolean',
+  },
   /**
    * Switch to enable/disable the embedded shell.
    */
@@ -1230,12 +1248,26 @@ function deriveFeatureRestrictingOptionsState<K extends keyof AllPreferences>(
   });
 }
 
-/** Helper for defining how to derive value/state for readOnly-affected preferences */
+/**
+ * Helper for defining how to derive value/state for readOnly-affected
+ * preferences. By default if `readOnly` is set to `true` will always return
+ * `false`. If `matchReadOnlyProperty` is `true` will return `true` if
+ * `readOnly` is `true`
+ *
+ * @param property original property name
+ * @param matchReadOnlyProperty whether to match readOnly or not
+ * @returns derived value
+ */
 function deriveReadOnlyOptionState<K extends keyof AllPreferences>(
-  property: K
+  property: K,
+  matchReadOnlyProperty = false
 ): DeriveValueFunction<boolean> {
   return (v, s) => ({
-    value: v(property) && !v('readOnly'),
+    value: Boolean(
+      matchReadOnlyProperty
+        ? v(property) || v('readOnly')
+        : v(property) && !v('readOnly')
+    ),
     state:
       s(property) ?? (v('readOnly') ? s('readOnly') ?? 'derived' : undefined),
   });
diff --git a/packages/compass-preferences-model/src/preferences.spec.ts b/packages/compass-preferences-model/src/preferences.spec.ts
index e43da91cc8c..28b17679900 100644
--- a/packages/compass-preferences-model/src/preferences.spec.ts
+++ b/packages/compass-preferences-model/src/preferences.spec.ts
@@ -167,6 +167,7 @@ describe('Preferences class', function () {
       enableMaps: 'set-cli',
       enableShell: 'set-cli',
       readOnly: 'set-global',
+      readWrite: 'set-global',
       ...expectedReleasedFeatureFlagsStates,
     });
   });
@@ -235,6 +236,7 @@ describe('Preferences class', function () {
       },
       {
         readOnly: true,
+        readWrite: true,
         enableShell: false,
       },
     ]);
@@ -305,6 +307,7 @@ describe('Preferences class', function () {
       trackUsageStatistics: 'set-global',
       enableMaps: 'set-cli',
       enableShell: 'derived',
+      readWrite: 'derived',
       ...expectedReleasedFeatureFlagsStates,
     });
   });
diff --git a/packages/compass-web/sandbox/index.tsx b/packages/compass-web/sandbox/index.tsx
index dd672cc805e..897d284d6c4 100644
--- a/packages/compass-web/sandbox/index.tsx
+++ b/packages/compass-web/sandbox/index.tsx
@@ -1,4 +1,4 @@
-import React, { useCallback, useLayoutEffect, useRef } from 'react';
+import React, { useCallback, useLayoutEffect } from 'react';
 import ReactDOM from 'react-dom';
 import {
   Body,
@@ -6,7 +6,6 @@ import {
   openToast,
   resetGlobalCSS,
 } from '@mongodb-js/compass-components';
-import type { AllPreferences } from 'compass-preferences-model';
 import { CompassWeb } from '../src/index';
 import { SandboxConnectionStorageProvider } from '../src/connection-storage';
 import { sandboxLogger } from './sandbox-logger';
@@ -14,10 +13,7 @@ import { sandboxTelemetry } from './sandbox-telemetry';
 import { useAtlasProxySignIn } from './sandbox-atlas-sign-in';
 import { sandboxConnectionStorage } from './sandbox-connection-storage';
 import { useWorkspaceTabRouter } from './sandbox-workspace-tab-router';
-import {
-  SandboxPreferencesUpdateProvider,
-  type SandboxPreferencesUpdateTrigger,
-} from '../src/preferences';
+import { SandboxPreferencesUpdateProvider } from '../src/preferences';
 
 const sandboxContainerStyles = css({
   width: '100%',
@@ -49,6 +45,7 @@ const App = () => {
     enableGenAISampleDocumentPassing,
     enableGenAIFeaturesAtlasOrg,
     optInGenAIFeatures,
+    userRoles,
   } = projectParams ?? {};
 
   const atlasServiceSandboxBackendVariant =
@@ -60,33 +57,6 @@ const App = () => {
       ? 'web-sandbox-atlas-qa'
       : 'web-sandbox-atlas';
 
-  const sandboxPreferencesUpdateTrigger =
-    useRef<null | SandboxPreferencesUpdateTrigger>(null);
-
-  const enablePreferencesUpdateTrigger =
-    process.env.E2E_TEST_CLOUD_WEB_ENABLE_PREFERENCE_SAVING === 'true';
-  if (
-    enablePreferencesUpdateTrigger &&
-    sandboxPreferencesUpdateTrigger.current === null
-  ) {
-    sandboxPreferencesUpdateTrigger.current = (
-      updatePreference: (preferences: Partial<AllPreferences>) => Promise<void>
-    ) => {
-      // Useful for e2e test to override preferences.
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      (globalThis as any).__compassWebE2ETestSavePreferences = async (
-        attributes: Partial<AllPreferences>
-      ) => {
-        await updatePreference(attributes);
-      };
-
-      return () => {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        delete (globalThis as any).__compassWebE2ETestSavePreferences;
-      };
-    };
-  }
-
   useLayoutEffect(() => {
     getMetaEl('csrf-token').setAttribute('content', csrfToken ?? '');
     getMetaEl('csrf-time').setAttribute('content', csrfTime ?? '');
@@ -106,13 +76,24 @@ const App = () => {
 
   const isAtlas = status === 'signed-in';
 
+  const groupRolePreferences = (() => {
+    if (!isAtlas) {
+      return {};
+    }
+    if (userRoles?.isDataAccessAdmin) {
+      return {};
+    }
+    if (userRoles?.isDataAccessWrite) {
+      return { readWrite: true };
+    }
+    return { readOnly: true };
+  })();
+
   return (
     <SandboxConnectionStorageProvider
       value={isAtlas ? null : sandboxConnectionStorage}
     >
-      <SandboxPreferencesUpdateProvider
-        value={sandboxPreferencesUpdateTrigger.current}
-      >
+      <SandboxPreferencesUpdateProvider>
         <Body as="div" className={sandboxContainerStyles}>
           <CompassWeb
             orgId={''}
@@ -138,6 +119,7 @@ const App = () => {
               optInGenAIFeatures: isAtlas && !!optInGenAIFeatures,
               enableDataModeling: true,
               enableMyQueries: false,
+              ...groupRolePreferences,
             }}
             onTrack={sandboxTelemetry.track}
             onDebug={sandboxLogger.debug}
diff --git a/packages/compass-web/sandbox/sandbox-atlas-sign-in.tsx b/packages/compass-web/sandbox/sandbox-atlas-sign-in.tsx
index 27d6e6bf900..54547da6688 100644
--- a/packages/compass-web/sandbox/sandbox-atlas-sign-in.tsx
+++ b/packages/compass-web/sandbox/sandbox-atlas-sign-in.tsx
@@ -20,6 +20,7 @@ type ProjectParams = {
   enableGenAISampleDocumentPassing: boolean;
   enableGenAIFeaturesAtlasOrg: boolean;
   optInGenAIFeatures: boolean;
+  userRoles: Record<string, boolean>;
 };
 
 type AtlasLoginReturnValue =
@@ -114,17 +115,19 @@ export function useAtlasProxySignIn(): AtlasLoginReturnValue {
           if (!projectId) {
             throw new Error('failed to get projectId');
           }
+          const params = await fetch(
+            `/cloud-mongodb-com/v2/${projectId}/params`
+          ).then((res) => {
+            return res.json();
+          });
           const {
             csrfToken,
             csrfTime,
             appUser: { isOptedIntoDataExplorerGenAIFeatures },
             currentOrganization: { genAIFeaturesEnabled },
             featureFlags: { groupEnabledFeatureFlags },
-          } = await fetch(`/cloud-mongodb-com/v2/${projectId}/params`).then(
-            (res) => {
-              return res.json();
-            }
-          );
+            userRoles,
+          } = params;
           setProjectParams({
             projectId,
             csrfToken,
@@ -138,6 +141,7 @@ export function useAtlasProxySignIn(): AtlasLoginReturnValue {
             enableGenAIFeaturesAtlasProject: groupEnabledFeatureFlags.includes(
               'ENABLE_DATA_EXPLORER_GEN_AI_FEATURES'
             ),
+            userRoles,
           });
           setStatus('signed-in');
           if (IS_CI) {
diff --git a/packages/compass-web/src/preferences.tsx b/packages/compass-web/src/preferences.tsx
index d7ee2c5f2a2..b80d69f7154 100644
--- a/packages/compass-web/src/preferences.tsx
+++ b/packages/compass-web/src/preferences.tsx
@@ -1,32 +1,50 @@
-import React, { useContext, useEffect, useRef } from 'react';
+import React, { useContext, useEffect, useRef, useState } from 'react';
 import type { AllPreferences } from 'compass-preferences-model/provider';
 import { CompassWebPreferencesAccess } from 'compass-preferences-model/provider';
 
 export type SandboxPreferencesUpdateTrigger = (
-  updatePreference: (preferences: Partial<AllPreferences>) => Promise<void>
+  updatePreference: (
+    preferences: Partial<AllPreferences>
+  ) => Promise<AllPreferences>
 ) => () => void;
 
 const SandboxPreferencesUpdateTriggerContext =
   React.createContext<SandboxPreferencesUpdateTrigger | null>(null);
 
-function useSandboxPreferencesUpdateTrigger() {
-  const updateTrigger = useContext(SandboxPreferencesUpdateTriggerContext);
-  return updateTrigger;
-}
+const kSandboxUpdateFn = Symbol.for('@compass-web-sandbox-update-preferences');
 
 /**
  * Only used in the sandbox to provide a way to update preferences.
  * @internal
  */
 export const SandboxPreferencesUpdateProvider = ({
-  value,
   children,
 }: {
-  value: SandboxPreferencesUpdateTrigger | null;
   children: React.ReactNode;
 }) => {
+  const [updateTrigger] = useState<SandboxPreferencesUpdateTrigger>(() => {
+    return (
+      updatePreferencesFn: (
+        preferences: Partial<AllPreferences>
+      ) => Promise<AllPreferences>
+    ) => {
+      // eslint-disable-next-line no-console
+      console.info(
+        `[compass-web sandbox] call window[Symbol.for('@compass-web-sandbox-update-preferences')]({}) to dynamically update preferences`
+      );
+      (globalThis as any)[kSandboxUpdateFn] = (
+        preferences: Partial<AllPreferences>
+      ) => {
+        return updatePreferencesFn(preferences);
+      };
+      return () => {
+        delete (globalThis as any)[kSandboxUpdateFn];
+      };
+    };
+  });
+
   return (
-    <SandboxPreferencesUpdateTriggerContext.Provider value={value}>
+    <SandboxPreferencesUpdateTriggerContext.Provider value={updateTrigger}>
       {children}
     </SandboxPreferencesUpdateTriggerContext.Provider>
   );
@@ -62,13 +80,15 @@ export function useCompassWebPreferences(
     })
   );
 
-  const onPreferencesUpdateTriggered = useSandboxPreferencesUpdateTrigger();
+  const onPreferencesUpdateTriggered = useContext(
+    SandboxPreferencesUpdateTriggerContext
+  );
 
   useEffect(() => {
-    // This is used by our e2e tests so that we can call a global function in the browser
-    // from the testing runtime to update preferences.
+    // This is used by our sandbox so that we can call a global function in the
+    // browser from the sandbox / testing runtime to update preferences.
     return onPreferencesUpdateTriggered?.(async (preferences) => {
-      await preferencesAccess.current.savePreferences(preferences);
+      return await preferencesAccess.current.savePreferences(preferences);
     });
   }, [onPreferencesUpdateTriggered]);
 
diff --git a/packages/compass-web/webpack.config.js b/packages/compass-web/webpack.config.js
index 4302f432967..d4b43ca855d 100644
--- a/packages/compass-web/webpack.config.js
+++ b/packages/compass-web/webpack.config.js
@@ -267,10 +267,6 @@ module.exports = (env, args) => {
           'process.env.COMPASS_WEB_HTTP_PROXY_CLOUD_CONFIG': JSON.stringify(
             process.env.COMPASS_WEB_HTTP_PROXY_CLOUD_CONFIG ?? 'dev'
           ),
-          'process.env.E2E_TEST_CLOUD_WEB_ENABLE_PREFERENCE_SAVING':
-            JSON.stringify(
-              process.env.E2E_TEST_CLOUD_WEB_ENABLE_PREFERENCE_SAVING ?? 'false'
-            ),
         }),
       ],
     });