Push Notifications - read only permission

I have users with a read only permission on their account, but when they log in to the app no notification token is generated, if you change this to device read only they get one. Is this by design?

It is by design. Tokens are stored in the user attributes and readonly users are not allowed to make any changes.

So read only users won't be able to receive push notifications, would there be a way to manually assign them the token?

To assign the token you have to know it. The workaround is temporary give them normal permissions and after one login remove it.

Perfect, will give that a go.