diff --git a/ansible/roles/openldap_server/tasks/acls.yaml b/ansible/roles/openldap_server/tasks/acls.yaml
index dd356e5..2b68cef 100644
--- a/ansible/roles/openldap_server/tasks/acls.yaml
+++ b/ansible/roles/openldap_server/tasks/acls.yaml
@@ -17,6 +17,7 @@
           by * none
         - >-
           to *
+          by * read
           by dn="{{ ldap_admin_dn }}" write
           by dn="{{ ldap_bind_dn }}" read
           by self read