Skip to content

Commit 3f1917b

Browse files
Update modules/ROOT/pages/authentication-authorization/immutable-roles-privileges.adoc
Co-authored-by: Phil Wright <[email protected]>
1 parent b36391d commit 3f1917b

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

modules/ROOT/pages/authentication-authorization/immutable-roles-privileges.adoc

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -121,7 +121,17 @@ DROP ROLE analyst
121121
----
122122
REVOKE MATCH {*} ON GRAPH * ELEMENTS * FROM analyst
123123
----
124+
.Rename the `analyst` role
125+
[source, cypher, role=noplay]
126+
----
127+
RENAME ROLE analyst TO dataReader
128+
----
124129

130+
[NOTE]
131+
====
132+
While the make-up (name, existence, associated privileges) of immutable roles is immutable, their assignment to users is not.
133+
This means that an immutable role can itself be granted to or revoked from a user by any user with `ROLE MANAGEMENT` privileges.
134+
====
125135
[NOTE]
126136
====
127137
Only immutable privileges (e.g. `GRANT IMMUTABLE MATCH {*} ON GRAPH * ELEMENTS * TO analyst` in the example above) can be assigned to immutable roles.

0 commit comments

Comments
 (0)