diff --git a/src/config/sync/jsonapi.settings.yml b/src/config/sync/jsonapi.settings.yml
index e6f94d1..268a9b3 100644
--- a/src/config/sync/jsonapi.settings.yml
+++ b/src/config/sync/jsonapi.settings.yml
@@ -1,7 +1,7 @@
 _core:
   default_config_hash: ve5n0mfUSWWZEFldenHnFrpcL1XKTjzTacerxemPPU4
 langcode: fr
-read_only: true
+read_only: false
 maintenance_header_retry_seconds:
   min: 5
   max: 10
diff --git a/src/config/sync/rest.resource.entity.file.yml b/src/config/sync/rest.resource.entity.file.yml
new file mode 100644
index 0000000..5ff9884
--- /dev/null
+++ b/src/config/sync/rest.resource.entity.file.yml
@@ -0,0 +1,20 @@
+uuid: 549f7239-e167-45eb-b238-c2dbc5173eae
+langcode: fr
+status: true
+dependencies:
+  module:
+    - file
+    - serialization
+    - user
+id: entity.file
+plugin_id: 'entity:file'
+granularity: resource
+configuration:
+  methods:
+    - GET
+    - POST
+    - PATCH
+  formats:
+    - json
+  authentication:
+    - cookie
diff --git a/src/config/sync/user.role.authenticated.yml b/src/config/sync/user.role.authenticated.yml
index 8b45e97..d4c739a 100644
--- a/src/config/sync/user.role.authenticated.yml
+++ b/src/config/sync/user.role.authenticated.yml
@@ -10,6 +10,7 @@ dependencies:
     - node.type.concernement
     - node.type.entite
   module:
+    - actions_permissions
     - devel
     - filter
     - graphql
@@ -47,6 +48,7 @@ permissions:
   - 'edit own chutier entities'
   - 'edit own composition entities'
   - 'edit own fil entities'
+  - 'execute entity:save_action file'
   - 'execute ouatterrir arbitrary graphql requests'
   - 'execute ouatterrir persisted graphql requests'
   - 'opt-in or out of matomo tracking'