diff --git a/awx/ui/client/src/access/addPermissions/roleSelect.directive.js b/awx/ui/client/src/access/addPermissions/roleSelect.directive.js
index c11dbe0e67..53bc191a6d 100644
--- a/awx/ui/client/src/access/addPermissions/roleSelect.directive.js
+++ b/awx/ui/client/src/access/addPermissions/roleSelect.directive.js
@@ -12,7 +12,7 @@ export default
             return {
                 restrict: 'E',
                 scope: false,
-                template: '<select ng-cloak class="AddPermissions-selectHide roleSelect2 form-control" ng-model="obj.roles" ng-options="role.label for role in roles track by role.value" multiple required></select>',
+                template: '<select ng-cloak class="AddPermissions-selectHide roleSelect2 form-control" ng-model="obj.roles" ng-options="role.label for role in roles | filter:{label: \'!Read\'} track by role.value" multiple required></select>',
                 link: function(scope, element, attrs, ctrl) {
                     CreateSelect2({
                         element: '.roleSelect2',