diff --git a/src/main/java/com/cisd/tms/common/config/WebMvcConfig.java b/src/main/java/com/cisd/tms/common/config/WebMvcConfig.java
index db3c0c5..9f8a4b3 100644
--- a/src/main/java/com/cisd/tms/common/config/WebMvcConfig.java
+++ b/src/main/java/com/cisd/tms/common/config/WebMvcConfig.java
@@ -103,6 +103,7 @@ public class WebMvcConfig implements WebMvcConfigurer {
                         "/api/v1/system/health",
                         "/api/v1/device/time-config",
                         "/api/v1/auth/ukey-login",
+                        "/api/v1/init/template",
                         "/api/v1/auth/ukey-login/randoms",
                         "/api/v1/auth/captcha",
                         "/api/v1/auth/super-admin/ukeys/issue-sign",
diff --git a/src/main/java/com/cisd/tms/modules/device/controller/DeviceController.java b/src/main/java/com/cisd/tms/modules/device/controller/DeviceController.java
index 5dbf1a6..432ed9e 100644
--- a/src/main/java/com/cisd/tms/modules/device/controller/DeviceController.java
+++ b/src/main/java/com/cisd/tms/modules/device/controller/DeviceController.java
@@ -49,14 +49,14 @@ public class DeviceController {
 
     @GetMapping("/profile")
     @Operation(summary = "查询设备画像", description = "返回设备静态信息，包括设备信息、硬件信息和按初始化方案裁剪后的软件版本信息。")
-    @RequireInternalAuth(role = RoleCode.OPS_ADMIN, authLevel = AuthLevel.LIMITED)
+    @RequireInternalAuth(anyRole = {RoleCode.OPS_ADMIN, RoleCode.SUPER_ADMIN, RoleCode.KEY_ADMIN, RoleCode.AUDIT_ADMIN}, authLevel = AuthLevel.LIMITED)
     public ApiResponse<DeviceProfileResponse> profile() {
         return ApiResponse.success(deviceProfileService.profile());
     }
 
     @GetMapping("/runtime-status")
     @Operation(summary = "查询设备运行状态", description = "返回硬件实时资源使用情况、加密卡状态，以及按初始化配置裁剪后的软件运行状态。")
-    @RequireInternalAuth(role = RoleCode.OPS_ADMIN, authLevel = AuthLevel.LIMITED)
+    @RequireInternalAuth(anyRole = {RoleCode.OPS_ADMIN, RoleCode.SUPER_ADMIN, RoleCode.KEY_ADMIN, RoleCode.AUDIT_ADMIN}, authLevel = AuthLevel.LIMITED)
     public ApiResponse<DeviceRuntimeStatusResponse> runtimeStatus() {
         return ApiResponse.success(deviceRuntimeStatusService.loadRuntimeStatus());
     }