Skip to content

Commit 918b89b

Browse files
Update modules/ROOT/pages/authentication-authorization/immutable-roles-privileges.adoc
Co-authored-by: Phil Wright <[email protected]>
1 parent 21d25ea commit 918b89b

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

modules/ROOT/pages/authentication-authorization/immutable-roles-privileges.adoc

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,8 @@ The following examples demonstrate how to use Cypher to manage immutable roles a
4141

4242
=== Restricting the actions of users who can manage privileges
4343

44-
To prevent all users, including the `admin` user, from performing *database management*, follow these steps:
44+
To prevent all users (including those with `PRIVILEGE MANAGEMENT` privileges) from performing *database management*, attach an immutable privilege to the `PUBLIC` role.
45+
The `PUBLIC` role implicitly and irrevocably applies to all users.
4546

4647
. Ensure that you have completed steps 1 an 2 from <<administer-immutable-roles-and-privileges>>.
4748
. Run the following command to deny the `IMMUTABLE DATABASE MANAGEMENT` privilege to the `PUBLIC` role:

0 commit comments

Comments
 (0)