User Management

User Management Page

The User Management page has three tabs: My Profile, All Users and Role Management.

My Profile

All users can access the My Profile tab to manage themselves.

my profile updated

There are three information cards at the top: Username shows the user’s username; Accessible graph shows how many graphs the user can access, and Password allows user to change password by clicking the key icon key :

change password

Below the cards are secret management section. You can create as many secrets for each graph as you want, but remember to copy the secret value out at the creation time. Once you refresh the page or go to another page and come back, the actual secret value will be masked for security. You need to provide an alias for the secret, and click the green plus sign to add the secret.

secret management

When token authentication is enabled, you need to use the secrets to request tokens and add the tokens in the HTTP request headers to call TigerGraph RESTful endpoints. Read more at: User Access Management.

All Users

Due to the difference in users' information display compared to GSQL, Admin Portal doesn’t allow users with admin role to a graph to create/edit/delete users or assign a user with a role to a graph. Superuser can manage users in this case. Users with Admin role to a local graph can revoke roles to other users for this local graph.

Both native users and proxy users are displayed in the User section. However, you can only change password for native users.

Only superuser can access this tab. Superuser can add new users, change other users' password, delete users, create proxy groups, change proxy rules of the groups, and delete proxy groups.

all users updated

Click add user btn to add new users:

all users (1)

Click change others password btn to change other users' password:

change others password

Click delete btn to delete a user.

Click proxy groups tab to see all proxy groups:

proxy groups

Click add group btn to add new proxy groups:

add proxy group

Click edit to edit the proxy rule of an existing proxy group:

edit proxy group

Click delete btn to delete a proxy group.

Read more about proxy group at User Access Management.

Role Management

Admin Portal does not indicate whether a user belongs a proxy group. You can find out more from GSQL client.

Admin Portal shows a combination of roles for proxy users. Proxy user which belongs to a proxy group inherits all the roles from the proxy group plus all the roles the proxy user has. Therefore, if you want to revoke a role from a proxy user, you need to revoke the role from the proxy group first. Then you might need to revoke the same role from the proxy user if the proxy user also has that role.

Superusers and Admin users can access this tab to assign different roles to users on different graphs. Superusers can assign superuser role to other users, while admin users cannot.

role management updated

Select a graph

You can use the dropdown menu at the top left corner to select on which graph you want to assign different roles to different users:

select graph

Search user

You can type in text to search for users:

search user

Settings for users

You can sort the users by alphabetic order or number of roles they have:

sort users

You can choose to show all users, show the users who have role(s), or show the users who don’t have a role:

show users

Grant a new role to a user

You have two ways to grant a new role to a user.

The first way is drag-and-drop. You can drag a user from the right section to under the role you want to grant.

assign by dnd updated

After the role is granted successfully, the user’s name will appear under the corresponding role, and the role’s color will appear on the user at the right section. You can grant multiple roles to the same user, and multiple colors will show on the user at the right section to indicate these roles.

The second way is right click a user, and choose the role you want to grant:

grant roles

Revoke a role from a user

You have two ways to revoke a role from a user.

The first way is drag-and-drop. You can drag a user from the role you want to revoke to the right section:

revoke dnd updated

After the role is revoked successfully, the user’s name will disappear under the corresponding role, and the role’s color will disappear from the user at the right section.

The second way is right click a user, and choose the role you want to revoke:

revoke a role

Change a user’s role

You can drag a user from under one role to under another role at the left section. This is a shortcut to change the user’s role:

change role updated

Similarly, you can also click proxy groups (1) to switch to proxy groups and manage their roles.

manage groups

Tip: If you manage users through GSQL, please click on refresh button in the top right corner to reflect the changes in Admin Portal.