Access Control Commands

📄️ Users, roles, and credentials

Database users authenticate to an instance. Roles grant database permissions, tokens authenticate a user, and remote credentials authorize access to external objects. Cloud accounts are separate.

📄️ Authenticate

Start a session using a password or an assigned personal token.

📄️ GenerateToken

Generate a personal token that can later be assigned to a user.

📄️ RefreshToken

Replace an existing session and its refresh token.

📄️ GetUserDetails

Read one user, their roles, effective permissions, and token tags.

📄️ CreateUser

Create a database user and assign existing roles.

📄️ GetUsers

List users and selected account details.

📄️ UpdateUser

Change a user and revoke their existing sessions.

📄️ RemoveUser

Delete a user and revoke their sessions and personal tokens.

📄️ CreateRole

Create a role with permissions for objects, indexes, and user administration.

📄️ GetRoles

List role definitions and their permissions.

📄️ UpdateRole

Change a role with permissions for objects, indexes, and user administration.

📄️ RemoveRole

Remove a role and its assignments.

📄️ CreateCredential

📄️ GetCredentials

List registered remote origins without exposing keys.

📄️ UpdateCredential

Replace the key for an existing remote origin.

📄️ RemoveCredential

Remove the credential registered for an origin.