Authentication¶
NebulaGraph Database Developer Edition uses authentication to verify a user's identity. For password authentication, the user must exist, be enabled, and not be locked.
The user also needs membership and the required privileges in the service group to connect to the Graph service and access resources.
Requirements for accessing a service group¶
User identity and access are managed separately:
| Information | Managed in | Instructions |
|---|---|---|
| Username, password, enabled status, and temporary lock status | Meta service | Use the ngctl commands in User management. |
| Service group membership, roles, and resource privileges | Graph service of the service group | Follow Configure user access to invite the user and grant privileges. |
Creating a user does not add the user to the service group. Inviting the user does not grant CONNECT or resource privileges.
Authentication method¶
Connect to the Graph service with a username and password. For the first deployment, set the root password in compose.yaml. See Set the root password.
See User management to create other users, change their passwords, and manage their status.
Sessionless mode¶
SDK clients can also use Sessionless mode. They connect with an empty username and password, and the Graph service checks privileges using the identity set by sessionless_user. All such clients share that user's privileges.
More information¶
- Configure user access: Invite a user and grant connection and resource privileges.
- Authorization overview: Learn about roles, ownership, and privilege sources.