@stiegjo22 You can extend the OOTB DAM asset update workflow to add a new process step that performs the action that you are looking for. As for the actual task i.e. setting the pdf to read only, if you are using something like a Apache FOP, you can use the encryption settings from this API to set ...