diff --git a/packages/core/upload/admin/src/pages/App/MediaLibrary.js b/packages/core/upload/admin/src/pages/App/MediaLibrary.js
index 64a0cc3c35..02669edd72 100644
--- a/packages/core/upload/admin/src/pages/App/MediaLibrary.js
+++ b/packages/core/upload/admin/src/pages/App/MediaLibrary.js
@@ -117,24 +117,26 @@ export const MediaLibrary = () => {
         <ActionLayout
           startActions={
             <>
-              <BoxWithHeight
-                paddingLeft={2}
-                paddingRight={2}
-                background="neutral0"
-                hasRadius
-                borderColor="neutral200"
-              >
-                <BaseCheckbox
-                  aria-label={formatMessage({
-                    id: getTrad('bulk.select.label'),
-                    defaultMessage: 'Select all assets',
-                  })}
-                  value={assets?.length > 0 && selected.length === assets?.length}
-                  onChange={selectAllAssets}
-                />
-              </BoxWithHeight>
-              <SortPicker />
-              <Filters />
+              {canUpdate && (
+                <BoxWithHeight
+                  paddingLeft={2}
+                  paddingRight={2}
+                  background="neutral0"
+                  hasRadius
+                  borderColor="neutral200"
+                >
+                  <BaseCheckbox
+                    aria-label={formatMessage({
+                      id: getTrad('bulk.select.label'),
+                      defaultMessage: 'Select all assets',
+                    })}
+                    value={assets?.length > 0 && selected.length === assets?.length}
+                    onChange={selectAllAssets}
+                  />
+                </BoxWithHeight>
+              )}
+              {canRead && <SortPicker />}
+              {canRead && <Filters />}
             </>
           }
           endActions={
diff --git a/packages/core/upload/admin/src/pages/App/tests/MediaLibrary.test.js b/packages/core/upload/admin/src/pages/App/tests/MediaLibrary.test.js
index 1ac1605dd3..6c280fe6d2 100644
--- a/packages/core/upload/admin/src/pages/App/tests/MediaLibrary.test.js
+++ b/packages/core/upload/admin/src/pages/App/tests/MediaLibrary.test.js
@@ -98,6 +98,75 @@ describe('Media library homepage', () => {
   });
 
   describe('general actions', () => {
+    describe('filters', () => {
+      it('shows the filters dropdown when the user is allowed to read', () => {
+        renderML();
+
+        expect(screen.getByText('app.utils.filters')).toBeInTheDocument();
+      });
+
+      it('hides the filters dropdown when the user is not allowed to read', () => {
+        useRBAC.mockReturnValue({
+          isLoading: false,
+          allowedActions: {
+            canRead: false,
+            canCreate: true,
+            canUpdate: false,
+          },
+        });
+
+        renderML();
+
+        expect(screen.queryByText('app.utils.filters')).not.toBeInTheDocument();
+      });
+    });
+
+    describe('sort by', () => {
+      it('shows the sort by dropdown when the user is allowed to read', () => {
+        renderML();
+
+        expect(screen.getByText('Sort by')).toBeInTheDocument();
+      });
+
+      it('hides the sort by dropdown when the user is not allowed to read', () => {
+        useRBAC.mockReturnValue({
+          isLoading: false,
+          allowedActions: {
+            canRead: false,
+            canCreate: true,
+            canUpdate: false,
+          },
+        });
+
+        renderML();
+
+        expect(screen.queryByText('Sort by')).not.toBeInTheDocument();
+      });
+    });
+
+    describe('select all', () => {
+      it('shows the select all button when the user is allowed to update', () => {
+        renderML();
+
+        expect(screen.getByLabelText('Select all assets')).toBeInTheDocument();
+      });
+
+      it('hides the select all button when the user is not allowed to update', () => {
+        useRBAC.mockReturnValue({
+          isLoading: false,
+          allowedActions: {
+            canRead: true,
+            canCreate: true,
+            canUpdate: false,
+          },
+        });
+
+        renderML();
+
+        expect(screen.queryByLabelText('Select all assets')).not.toBeInTheDocument();
+      });
+    });
+
     describe('create asset', () => {
       it('hides the "Upload new asset" button when the user does not have the permissions to', async () => {
         useRBAC.mockReturnValue({