You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/ROOT/pages/authentication-authorization/manage-users.adoc
+90-36Lines changed: 90 additions & 36 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -506,7 +506,7 @@ Available users can be seen using `SHOW USERS`, which will produce a table conta
506
506
507
507
This is not necessarily the set of roles that a user will receive in practice. The latter depends on DMBS configuration as well as the user's xref:authentication-authorization/auth-providers.adoc[Auth Providers].
508
508
509
-
Examples of where a user would receive a different set of roles from that which appears in this column would include cases where they use external (e.g. LDAP or OIDC) auth, or where they do not have the `native` xref:authentication-authorization/auth-providers.adoc[Auth Provider].
509
+
Examples of where a user would receive a different set of roles from that which appears in this column would include where they use external (e.g. LDAP or OIDC) auth, or where `native` is not listed in the xref:configuration/configuration-settings.adoc#config_dbms.security.authorization_providers[`dbms.security.authorization_providers`] configuration setting.
510
510
511
511
Will return `null` in community edition.
512
512
| LIST OF STRING
@@ -538,7 +538,14 @@ Will return `null` in community edition.
538
538
| {check-mark}
539
539
|===
540
540
541
+
[NOTE]
542
+
====
543
+
When first starting a Neo4j DBMS, there is always a single default user `neo4j` with administrative privileges.
544
+
It is possible to set the initial password using xref:configuration/set-initial-password.adoc[`neo4j-admin dbms set-initial-password <password>`], otherwise it is necessary to change the password after the first login.
545
+
====
541
546
547
+
.Show users
548
+
======
542
549
[source, cypher, role=noplay]
543
550
----
544
551
SHOW USERS
@@ -565,6 +572,61 @@ SHOW USERS
565
572
|<null>
566
573
5+a|Rows: 2
567
574
|===
575
+
======
576
+
577
+
.Show user with column reorder and filtering
578
+
======
579
+
This example shows how to:
580
+
581
+
* Reorder the columns using a `YIELD` clause.
582
+
* Filter the results using a `WHERE` clause.
583
+
584
+
[source, cypher, role=noplay]
585
+
----
586
+
SHOW USER YIELD user, suspended, passwordChangeRequired, roles, home
To inspect users' xref:authentication-authorization/auth-providers.adoc[Auth Providers], use `SHOW USERS WITH AUTH`. This command will produce a row per user per Auth Provider and will yield the following two columns in addition to those output by `SHOW USERS`:
570
632
@@ -590,7 +652,8 @@ To inspect users' xref:authentication-authorization/auth-providers.adoc[Auth Pro
590
652
| {check-mark}
591
653
|===
592
654
593
-
655
+
.Show users with auth
656
+
======
594
657
[source, cypher, role=noplay]
595
658
----
596
659
SHOW USERS WITH AUTH
@@ -635,50 +698,41 @@ SHOW USERS WITH AUTH
635
698
|{
636
699
"id": "jacksIdForOidc1"
637
700
}
638
-
7+a|Rows: 1
701
+
7+a|Rows: 3
639
702
|===
640
-
641
-
[NOTE]
642
-
====
643
-
When first starting a Neo4j DBMS, there is always a single default user `neo4j` with administrative privileges.
644
-
It is possible to set the initial password using xref:configuration/set-initial-password.adoc[`neo4j-admin dbms set-initial-password <password>`], otherwise it is necessary to change the password after the first login.
645
-
====
646
-
647
-
.Show user
648
-
======
649
-
This example shows how to:
650
-
651
-
* Reorder the columns using a `YIELD` clause.
652
-
* Filter the results using a `WHERE` clause.
653
-
654
-
[source, cypher, role=noplay]
655
-
----
656
-
SHOW USER YIELD user, suspended, passwordChangeRequired, roles, home
657
-
WHERE user = 'jake'
658
-
----
659
703
======
660
704
661
-
.Show user
662
-
======
663
-
It is possible to add a `RETURN` clause to further manipulate the results after filtering.
664
-
In this example, the `RETURN` clause is used to filter out the `roles` column and rename the `user` column to `adminUser`.
665
-
666
-
[source,cypher,role=noplay]
667
-
----
668
-
SHOW USERS YIELD roles, user
669
-
WHERE 'admin' IN roles
670
-
RETURN user AS adminUser
671
-
----
672
-
======
673
-
674
-
.Show user with auth
705
+
.Show user with auth using filtering
675
706
======
676
707
Show all of the users with the `oidc` Auth Provider.
0 commit comments