diff --git a/roles/usermanagement/tasks/keycloak-ldap-provider.yaml b/roles/usermanagement/tasks/keycloak-ldap-provider.yaml
index 7ea5e8b..e86c679 100644
--- a/roles/usermanagement/tasks/keycloak-ldap-provider.yaml
+++ b/roles/usermanagement/tasks/keycloak-ldap-provider.yaml
@@ -80,7 +80,7 @@
         config:
           always.read.value.from.ldap: true
           is.mandatory.in.ldap: false
-          read.only: false
+          read.only: true
           user.model.attribute: modifyTimestamp
           ldap.attribute: modifyTimestamp
       - name: "creation date"