1<!DOCTYPE html>
2<html lang="en">
3<head>
4<meta charset="UTF-8">
5<meta http-equiv="X-UA-Compatible" content="IE=edge">
6<meta name="viewport" content="width=device-width, initial-scale=1.0">
7<meta name="generator" content="Asciidoctor 2.0.10">
8<meta name="author" content="Couchbase">
9<title>couchbase-cli-user-manage(1)</title>
10<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Open+Sans:300,300italic,400,400italic,600,600italic%7CNoto+Serif:400,400italic,700,700italic%7CDroid+Sans+Mono:400,700">
11<style>
12/* Asciidoctor default stylesheet | MIT License | https://asciidoctor.org */
13/* Uncomment @import statement to use as custom stylesheet */
14/*@import "https://fonts.googleapis.com/css?family=Open+Sans:300,300italic,400,400italic,600,600italic%7CNoto+Serif:400,400italic,700,700italic%7CDroid+Sans+Mono:400,700";*/
15article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}
16audio,video{display:inline-block}
17audio:not([controls]){display:none;height:0}
18html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}
19a{background:none}
20a:focus{outline:thin dotted}
21a:active,a:hover{outline:0}
22h1{font-size:2em;margin:.67em 0}
23abbr[title]{border-bottom:1px dotted}
24b,strong{font-weight:bold}
25dfn{font-style:italic}
26hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}
27mark{background:#ff0;color:#000}
28code,kbd,pre,samp{font-family:monospace;font-size:1em}
29pre{white-space:pre-wrap}
30q{quotes:"\201C" "\201D" "\2018" "\2019"}
31small{font-size:80%}
32sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}
33sup{top:-.5em}
34sub{bottom:-.25em}
35img{border:0}
36svg:not(:root){overflow:hidden}
37figure{margin:0}
38fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em}
39legend{border:0;padding:0}
40button,input,select,textarea{font-family:inherit;font-size:100%;margin:0}
41button,input{line-height:normal}
42button,select{text-transform:none}
43button,html input[type="button"],input[type="reset"],input[type="submit"]{-webkit-appearance:button;cursor:pointer}
44button[disabled],html input[disabled]{cursor:default}
45input[type="checkbox"],input[type="radio"]{box-sizing:border-box;padding:0}
46button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}
47textarea{overflow:auto;vertical-align:top}
48table{border-collapse:collapse;border-spacing:0}
49*,*::before,*::after{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box}
50html,body{font-size:100%}
51body{background:#fff;color:rgba(0,0,0,.8);padding:0;margin:0;font-family:"Noto Serif","DejaVu Serif",serif;font-weight:400;font-style:normal;line-height:1;position:relative;cursor:auto;tab-size:4;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased}
52a:hover{cursor:pointer}
53img,object,embed{max-width:100%;height:auto}
54object,embed{height:100%}
55img{-ms-interpolation-mode:bicubic}
56.left{float:left!important}
57.right{float:right!important}
58.text-left{text-align:left!important}
59.text-right{text-align:right!important}
60.text-center{text-align:center!important}
61.text-justify{text-align:justify!important}
62.hide{display:none}
63img,object,svg{display:inline-block;vertical-align:middle}
64textarea{height:auto;min-height:50px}
65select{width:100%}
66.center{margin-left:auto;margin-right:auto}
67.stretch{width:100%}
68.subheader,.admonitionblock td.content>.title,.audioblock>.title,.exampleblock>.title,.imageblock>.title,.listingblock>.title,.literalblock>.title,.stemblock>.title,.openblock>.title,.paragraph>.title,.quoteblock>.title,table.tableblock>.title,.verseblock>.title,.videoblock>.title,.dlist>.title,.olist>.title,.ulist>.title,.qlist>.title,.hdlist>.title{line-height:1.45;color:#7a2518;font-weight:400;margin-top:0;margin-bottom:.25em}
69div,dl,dt,dd,ul,ol,li,h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6,pre,form,p,blockquote,th,td{margin:0;padding:0;direction:ltr}
70a{color:#2156a5;text-decoration:underline;line-height:inherit}
71a:hover,a:focus{color:#1d4b8f}
72a img{border:0}
73p{font-family:inherit;font-weight:400;font-size:1em;line-height:1.6;margin-bottom:1.25em;text-rendering:optimizeLegibility}
74p aside{font-size:.875em;line-height:1.35;font-style:italic}
75h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{font-family:"Open Sans","DejaVu Sans",sans-serif;font-weight:300;font-style:normal;color:#ba3925;text-rendering:optimizeLegibility;margin-top:1em;margin-bottom:.5em;line-height:1.0125em}
76h1 small,h2 small,h3 small,#toctitle small,.sidebarblock>.content>.title small,h4 small,h5 small,h6 small{font-size:60%;color:#e99b8f;line-height:0}
77h1{font-size:2.125em}
78h2{font-size:1.6875em}
79h3,#toctitle,.sidebarblock>.content>.title{font-size:1.375em}
80h4,h5{font-size:1.125em}
81h6{font-size:1em}
82hr{border:solid #dddddf;border-width:1px 0 0;clear:both;margin:1.25em 0 1.1875em;height:0}
83em,i{font-style:italic;line-height:inherit}
84strong,b{font-weight:bold;line-height:inherit}
85small{font-size:60%;line-height:inherit}
86code{font-family:"Droid Sans Mono","DejaVu Sans Mono",monospace;font-weight:400;color:rgba(0,0,0,.9)}
87ul,ol,dl{font-size:1em;line-height:1.6;margin-bottom:1.25em;list-style-position:outside;font-family:inherit}
88ul,ol{margin-left:1.5em}
89ul li ul,ul li ol{margin-left:1.25em;margin-bottom:0;font-size:1em}
90ul.square li ul,ul.circle li ul,ul.disc li ul{list-style:inherit}
91ul.square{list-style-type:square}
92ul.circle{list-style-type:circle}
93ul.disc{list-style-type:disc}
94ol li ul,ol li ol{margin-left:1.25em;margin-bottom:0}
95dl dt{margin-bottom:.3125em;font-weight:bold}
96dl dd{margin-bottom:1.25em}
97abbr,acronym{text-transform:uppercase;font-size:90%;color:rgba(0,0,0,.8);border-bottom:1px dotted #ddd;cursor:help}
98abbr{text-transform:none}
99blockquote{margin:0 0 1.25em;padding:.5625em 1.25em 0 1.1875em;border-left:1px solid #ddd}
100blockquote cite{display:block;font-size:.9375em;color:rgba(0,0,0,.6)}
101blockquote cite::before{content:"\2014 \0020"}
102blockquote cite a,blockquote cite a:visited{color:rgba(0,0,0,.6)}
103blockquote,blockquote p{line-height:1.6;color:rgba(0,0,0,.85)}
104@media screen and (min-width:768px){h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{line-height:1.2}
105h1{font-size:2.75em}
106h2{font-size:2.3125em}
107h3,#toctitle,.sidebarblock>.content>.title{font-size:1.6875em}
108h4{font-size:1.4375em}}
109table{background:#fff;margin-bottom:1.25em;border:solid 1px #dedede}
110table thead,table tfoot{background:#f7f8f7}
111table thead tr th,table thead tr td,table tfoot tr th,table tfoot tr td{padding:.5em .625em .625em;font-size:inherit;color:rgba(0,0,0,.8);text-align:left}
112table tr th,table tr td{padding:.5625em .625em;font-size:inherit;color:rgba(0,0,0,.8)}
113table tr.even,table tr.alt{background:#f8f8f7}
114table thead tr th,table tfoot tr th,table tbody tr td,table tr td,table tfoot tr td{display:table-cell;line-height:1.6}
115h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{line-height:1.2;word-spacing:-.05em}
116h1 strong,h2 strong,h3 strong,#toctitle strong,.sidebarblock>.content>.title strong,h4 strong,h5 strong,h6 strong{font-weight:400}
117.clearfix::before,.clearfix::after,.float-group::before,.float-group::after{content:" ";display:table}
118.clearfix::after,.float-group::after{clear:both}
119:not(pre):not([class^=L])>code{font-size:.9375em;font-style:normal!important;letter-spacing:0;padding:.1em .5ex;word-spacing:-.15em;background:#f7f7f8;-webkit-border-radius:4px;border-radius:4px;line-height:1.45;text-rendering:optimizeSpeed;word-wrap:break-word}
120:not(pre)>code.nobreak{word-wrap:normal}
121:not(pre)>code.nowrap{white-space:nowrap}
122pre{color:rgba(0,0,0,.9);font-family:"Droid Sans Mono","DejaVu Sans Mono",monospace;line-height:1.45;text-rendering:optimizeSpeed}
123pre code,pre pre{color:inherit;font-size:inherit;line-height:inherit}
124pre>code{display:block}
125pre.nowrap,pre.nowrap pre{white-space:pre;word-wrap:normal}
126em em{font-style:normal}
127strong strong{font-weight:400}
128.keyseq{color:rgba(51,51,51,.8)}
129kbd{font-family:"Droid Sans Mono","DejaVu Sans Mono",monospace;display:inline-block;color:rgba(0,0,0,.8);font-size:.65em;line-height:1.45;background:#f7f7f7;border:1px solid #ccc;-webkit-border-radius:3px;border-radius:3px;-webkit-box-shadow:0 1px 0 rgba(0,0,0,.2),0 0 0 .1em white inset;box-shadow:0 1px 0 rgba(0,0,0,.2),0 0 0 .1em #fff inset;margin:0 .15em;padding:.2em .5em;vertical-align:middle;position:relative;top:-.1em;white-space:nowrap}
130.keyseq kbd:first-child{margin-left:0}
131.keyseq kbd:last-child{margin-right:0}
132.menuseq,.menuref{color:#000}
133.menuseq b:not(.caret),.menuref{font-weight:inherit}
134.menuseq{word-spacing:-.02em}
135.menuseq b.caret{font-size:1.25em;line-height:.8}
136.menuseq i.caret{font-weight:bold;text-align:center;width:.45em}
137b.button::before,b.button::after{position:relative;top:-1px;font-weight:400}
138b.button::before{content:"[";padding:0 3px 0 2px}
139b.button::after{content:"]";padding:0 2px 0 3px}
140p a>code:hover{color:rgba(0,0,0,.9)}
141#header,#content,#footnotes,#footer{width:100%;margin-left:auto;margin-right:auto;margin-top:0;margin-bottom:0;max-width:62.5em;*zoom:1;position:relative;padding-left:.9375em;padding-right:.9375em}
142#header::before,#header::after,#content::before,#content::after,#footnotes::before,#footnotes::after,#footer::before,#footer::after{content:" ";display:table}
143#header::after,#content::after,#footnotes::after,#footer::after{clear:both}
144#content{margin-top:1.25em}
145#content::before{content:none}
146#header>h1:first-child{color:rgba(0,0,0,.85);margin-top:2.25rem;margin-bottom:0}
147#header>h1:first-child+#toc{margin-top:8px;border-top:1px solid #dddddf}
148#header>h1:only-child,body.toc2 #header>h1:nth-last-child(2){border-bottom:1px solid #dddddf;padding-bottom:8px}
149#header .details{border-bottom:1px solid #dddddf;line-height:1.45;padding-top:.25em;padding-bottom:.25em;padding-left:.25em;color:rgba(0,0,0,.6);display:-ms-flexbox;display:-webkit-flex;display:flex;-ms-flex-flow:row wrap;-webkit-flex-flow:row wrap;flex-flow:row wrap}
150#header .details span:first-child{margin-left:-.125em}
151#header .details span.email a{color:rgba(0,0,0,.85)}
152#header .details br{display:none}
153#header .details br+span::before{content:"\00a0\2013\00a0"}
154#header .details br+span.author::before{content:"\00a0\22c5\00a0";color:rgba(0,0,0,.85)}
155#header .details br+span#revremark::before{content:"\00a0|\00a0"}
156#header #revnumber{text-transform:capitalize}
157#header #revnumber::after{content:"\00a0"}
158#content>h1:first-child:not([class]){color:rgba(0,0,0,.85);border-bottom:1px solid #dddddf;padding-bottom:8px;margin-top:0;padding-top:1rem;margin-bottom:1.25rem}
159#toc{border-bottom:1px solid #e7e7e9;padding-bottom:.5em}
160#toc>ul{margin-left:.125em}
161#toc ul.sectlevel0>li>a{font-style:italic}
162#toc ul.sectlevel0 ul.sectlevel1{margin:.5em 0}
163#toc ul{font-family:"Open Sans","DejaVu Sans",sans-serif;list-style-type:none}
164#toc li{line-height:1.3334;margin-top:.3334em}
165#toc a{text-decoration:none}
166#toc a:active{text-decoration:underline}
167#toctitle{color:#7a2518;font-size:1.2em}
168@media screen and (min-width:768px){#toctitle{font-size:1.375em}
169body.toc2{padding-left:15em;padding-right:0}
170#toc.toc2{margin-top:0!important;background:#f8f8f7;position:fixed;width:15em;left:0;top:0;border-right:1px solid #e7e7e9;border-top-width:0!important;border-bottom-width:0!important;z-index:1000;padding:1.25em 1em;height:100%;overflow:auto}
171#toc.toc2 #toctitle{margin-top:0;margin-bottom:.8rem;font-size:1.2em}
172#toc.toc2>ul{font-size:.9em;margin-bottom:0}
173#toc.toc2 ul ul{margin-left:0;padding-left:1em}
174#toc.toc2 ul.sectlevel0 ul.sectlevel1{padding-left:0;margin-top:.5em;margin-bottom:.5em}
175body.toc2.toc-right{padding-left:0;padding-right:15em}
176body.toc2.toc-right #toc.toc2{border-right-width:0;border-left:1px solid #e7e7e9;left:auto;right:0}}
177@media screen and (min-width:1280px){body.toc2{padding-left:20em;padding-right:0}
178#toc.toc2{width:20em}
179#toc.toc2 #toctitle{font-size:1.375em}
180#toc.toc2>ul{font-size:.95em}
181#toc.toc2 ul ul{padding-left:1.25em}
182body.toc2.toc-right{padding-left:0;padding-right:20em}}
183#content #toc{border-style:solid;border-width:1px;border-color:#e0e0dc;margin-bottom:1.25em;padding:1.25em;background:#f8f8f7;-webkit-border-radius:4px;border-radius:4px}
184#content #toc>:first-child{margin-top:0}
185#content #toc>:last-child{margin-bottom:0}
186#footer{max-width:100%;background:rgba(0,0,0,.8);padding:1.25em}
187#footer-text{color:rgba(255,255,255,.8);line-height:1.44}
188#content{margin-bottom:.625em}
189.sect1{padding-bottom:.625em}
190@media screen and (min-width:768px){#content{margin-bottom:1.25em}
191.sect1{padding-bottom:1.25em}}
192.sect1:last-child{padding-bottom:0}
193.sect1+.sect1{border-top:1px solid #e7e7e9}
194#content h1>a.anchor,h2>a.anchor,h3>a.anchor,#toctitle>a.anchor,.sidebarblock>.content>.title>a.anchor,h4>a.anchor,h5>a.anchor,h6>a.anchor{position:absolute;z-index:1001;width:1.5ex;margin-left:-1.5ex;display:block;text-decoration:none!important;visibility:hidden;text-align:center;font-weight:400}
195#content h1>a.anchor::before,h2>a.anchor::before,h3>a.anchor::before,#toctitle>a.anchor::before,.sidebarblock>.content>.title>a.anchor::before,h4>a.anchor::before,h5>a.anchor::before,h6>a.anchor::before{content:"\00A7";font-size:.85em;display:block;padding-top:.1em}
196#content h1:hover>a.anchor,#content h1>a.anchor:hover,h2:hover>a.anchor,h2>a.anchor:hover,h3:hover>a.anchor,#toctitle:hover>a.anchor,.sidebarblock>.content>.title:hover>a.anchor,h3>a.anchor:hover,#toctitle>a.anchor:hover,.sidebarblock>.content>.title>a.anchor:hover,h4:hover>a.anchor,h4>a.anchor:hover,h5:hover>a.anchor,h5>a.anchor:hover,h6:hover>a.anchor,h6>a.anchor:hover{visibility:visible}
197#content h1>a.link,h2>a.link,h3>a.link,#toctitle>a.link,.sidebarblock>.content>.title>a.link,h4>a.link,h5>a.link,h6>a.link{color:#ba3925;text-decoration:none}
198#content h1>a.link:hover,h2>a.link:hover,h3>a.link:hover,#toctitle>a.link:hover,.sidebarblock>.content>.title>a.link:hover,h4>a.link:hover,h5>a.link:hover,h6>a.link:hover{color:#a53221}
199details,.audioblock,.imageblock,.literalblock,.listingblock,.stemblock,.videoblock{margin-bottom:1.25em}
200details>summary:first-of-type{cursor:pointer;display:list-item;outline:none;margin-bottom:.75em}
201.admonitionblock td.content>.title,.audioblock>.title,.exampleblock>.title,.imageblock>.title,.listingblock>.title,.literalblock>.title,.stemblock>.title,.openblock>.title,.paragraph>.title,.quoteblock>.title,table.tableblock>.title,.verseblock>.title,.videoblock>.title,.dlist>.title,.olist>.title,.ulist>.title,.qlist>.title,.hdlist>.title{text-rendering:optimizeLegibility;text-align:left;font-family:"Noto Serif","DejaVu Serif",serif;font-size:1rem;font-style:italic}
202table.tableblock.fit-content>caption.title{white-space:nowrap;width:0}
203.paragraph.lead>p,#preamble>.sectionbody>[class="paragraph"]:first-of-type p{font-size:1.21875em;line-height:1.6;color:rgba(0,0,0,.85)}
204table.tableblock #preamble>.sectionbody>[class="paragraph"]:first-of-type p{font-size:inherit}
205.admonitionblock>table{border-collapse:separate;border:0;background:none;width:100%}
206.admonitionblock>table td.icon{text-align:center;width:80px}
207.admonitionblock>table td.icon img{max-width:none}
208.admonitionblock>table td.icon .title{font-weight:bold;font-family:"Open Sans","DejaVu Sans",sans-serif;text-transform:uppercase}
209.admonitionblock>table td.content{padding-left:1.125em;padding-right:1.25em;border-left:1px solid #dddddf;color:rgba(0,0,0,.6)}
210.admonitionblock>table td.content>:last-child>:last-child{margin-bottom:0}
211.exampleblock>.content{border-style:solid;border-width:1px;border-color:#e6e6e6;margin-bottom:1.25em;padding:1.25em;background:#fff;-webkit-border-radius:4px;border-radius:4px}
212.exampleblock>.content>:first-child{margin-top:0}
213.exampleblock>.content>:last-child{margin-bottom:0}
214.sidebarblock{border-style:solid;border-width:1px;border-color:#dbdbd6;margin-bottom:1.25em;padding:1.25em;background:#f3f3f2;-webkit-border-radius:4px;border-radius:4px}
215.sidebarblock>:first-child{margin-top:0}
216.sidebarblock>:last-child{margin-bottom:0}
217.sidebarblock>.content>.title{color:#7a2518;margin-top:0;text-align:center}
218.exampleblock>.content>:last-child>:last-child,.exampleblock>.content .olist>ol>li:last-child>:last-child,.exampleblock>.content .ulist>ul>li:last-child>:last-child,.exampleblock>.content .qlist>ol>li:last-child>:last-child,.sidebarblock>.content>:last-child>:last-child,.sidebarblock>.content .olist>ol>li:last-child>:last-child,.sidebarblock>.content .ulist>ul>li:last-child>:last-child,.sidebarblock>.content .qlist>ol>li:last-child>:last-child{margin-bottom:0}
219.literalblock pre,.listingblock>.content>pre{-webkit-border-radius:4px;border-radius:4px;word-wrap:break-word;overflow-x:auto;padding:1em;font-size:.8125em}
220@media screen and (min-width:768px){.literalblock pre,.listingblock>.content>pre{font-size:.90625em}}
221@media screen and (min-width:1280px){.literalblock pre,.listingblock>.content>pre{font-size:1em}}
222.literalblock pre,.listingblock>.content>pre:not(.highlight),.listingblock>.content>pre[class="highlight"],.listingblock>.content>pre[class^="highlight "]{background:#f7f7f8}
223.literalblock.output pre{color:#f7f7f8;background:rgba(0,0,0,.9)}
224.listingblock>.content{position:relative}
225.listingblock code[data-lang]::before{display:none;content:attr(data-lang);position:absolute;font-size:.75em;top:.425rem;right:.5rem;line-height:1;text-transform:uppercase;color:inherit;opacity:.5}
226.listingblock:hover code[data-lang]::before{display:block}
227.listingblock.terminal pre .command::before{content:attr(data-prompt);padding-right:.5em;color:inherit;opacity:.5}
228.listingblock.terminal pre .command:not([data-prompt])::before{content:"$"}
229.listingblock pre.highlightjs{padding:0}
230.listingblock pre.highlightjs>code{padding:1em;-webkit-border-radius:4px;border-radius:4px}
231.listingblock pre.prettyprint{border-width:0}
232.prettyprint{background:#f7f7f8}
233pre.prettyprint .linenums{line-height:1.45;margin-left:2em}
234pre.prettyprint li{background:none;list-style-type:inherit;padding-left:0}
235pre.prettyprint li code[data-lang]::before{opacity:1}
236pre.prettyprint li:not(:first-child) code[data-lang]::before{display:none}
237table.linenotable{border-collapse:separate;border:0;margin-bottom:0;background:none}
238table.linenotable td[class]{color:inherit;vertical-align:top;padding:0;line-height:inherit;white-space:normal}
239table.linenotable td.code{padding-left:.75em}
240table.linenotable td.linenos{border-right:1px solid currentColor;opacity:.35;padding-right:.5em}
241pre.pygments .lineno{border-right:1px solid currentColor;opacity:.35;display:inline-block;margin-right:.75em}
242pre.pygments .lineno::before{content:"";margin-right:-.125em}
243.quoteblock{margin:0 1em 1.25em 1.5em;display:table}
244.quoteblock:not(.excerpt)>.title{margin-left:-1.5em;margin-bottom:.75em}
245.quoteblock blockquote,.quoteblock p{color:rgba(0,0,0,.85);font-size:1.15rem;line-height:1.75;word-spacing:.1em;letter-spacing:0;font-style:italic;text-align:justify}
246.quoteblock blockquote{margin:0;padding:0;border:0}
247.quoteblock blockquote::before{content:"\201c";float:left;font-size:2.75em;font-weight:bold;line-height:.6em;margin-left:-.6em;color:#7a2518;text-shadow:0 1px 2px rgba(0,0,0,.1)}
248.quoteblock blockquote>.paragraph:last-child p{margin-bottom:0}
249.quoteblock .attribution{margin-top:.75em;margin-right:.5ex;text-align:right}
250.verseblock{margin:0 1em 1.25em}
251.verseblock pre{font-family:"Open Sans","DejaVu Sans",sans;font-size:1.15rem;color:rgba(0,0,0,.85);font-weight:300;text-rendering:optimizeLegibility}
252.verseblock pre strong{font-weight:400}
253.verseblock .attribution{margin-top:1.25rem;margin-left:.5ex}
254.quoteblock .attribution,.verseblock .attribution{font-size:.9375em;line-height:1.45;font-style:italic}
255.quoteblock .attribution br,.verseblock .attribution br{display:none}
256.quoteblock .attribution cite,.verseblock .attribution cite{display:block;letter-spacing:-.025em;color:rgba(0,0,0,.6)}
257.quoteblock.abstract blockquote::before,.quoteblock.excerpt blockquote::before,.quoteblock .quoteblock blockquote::before{display:none}
258.quoteblock.abstract blockquote,.quoteblock.abstract p,.quoteblock.excerpt blockquote,.quoteblock.excerpt p,.quoteblock .quoteblock blockquote,.quoteblock .quoteblock p{line-height:1.6;word-spacing:0}
259.quoteblock.abstract{margin:0 1em 1.25em;display:block}
260.quoteblock.abstract>.title{margin:0 0 .375em;font-size:1.15em;text-align:center}
261.quoteblock.excerpt>blockquote,.quoteblock .quoteblock{padding:0 0 .25em 1em;border-left:.25em solid #dddddf}
262.quoteblock.excerpt,.quoteblock .quoteblock{margin-left:0}
263.quoteblock.excerpt blockquote,.quoteblock.excerpt p,.quoteblock .quoteblock blockquote,.quoteblock .quoteblock p{color:inherit;font-size:1.0625rem}
264.quoteblock.excerpt .attribution,.quoteblock .quoteblock .attribution{color:inherit;text-align:left;margin-right:0}
265table.tableblock{max-width:100%;border-collapse:separate}
266p.tableblock:last-child{margin-bottom:0}
267td.tableblock>.content>:last-child{margin-bottom:-1.25em}
268td.tableblock>.content>:last-child.sidebarblock{margin-bottom:0}
269table.tableblock,th.tableblock,td.tableblock{border:0 solid #dedede}
270table.grid-all>thead>tr>.tableblock,table.grid-all>tbody>tr>.tableblock{border-width:0 1px 1px 0}
271table.grid-all>tfoot>tr>.tableblock{border-width:1px 1px 0 0}
272table.grid-cols>*>tr>.tableblock{border-width:0 1px 0 0}
273table.grid-rows>thead>tr>.tableblock,table.grid-rows>tbody>tr>.tableblock{border-width:0 0 1px}
274table.grid-rows>tfoot>tr>.tableblock{border-width:1px 0 0}
275table.grid-all>*>tr>.tableblock:last-child,table.grid-cols>*>tr>.tableblock:last-child{border-right-width:0}
276table.grid-all>tbody>tr:last-child>.tableblock,table.grid-all>thead:last-child>tr>.tableblock,table.grid-rows>tbody>tr:last-child>.tableblock,table.grid-rows>thead:last-child>tr>.tableblock{border-bottom-width:0}
277table.frame-all{border-width:1px}
278table.frame-sides{border-width:0 1px}
279table.frame-topbot,table.frame-ends{border-width:1px 0}
280table.stripes-all tr,table.stripes-odd tr:nth-of-type(odd),table.stripes-even tr:nth-of-type(even),table.stripes-hover tr:hover{background:#f8f8f7}
281th.halign-left,td.halign-left{text-align:left}
282th.halign-right,td.halign-right{text-align:right}
283th.halign-center,td.halign-center{text-align:center}
284th.valign-top,td.valign-top{vertical-align:top}
285th.valign-bottom,td.valign-bottom{vertical-align:bottom}
286th.valign-middle,td.valign-middle{vertical-align:middle}
287table thead th,table tfoot th{font-weight:bold}
288tbody tr th{display:table-cell;line-height:1.6;background:#f7f8f7}
289tbody tr th,tbody tr th p,tfoot tr th,tfoot tr th p{color:rgba(0,0,0,.8);font-weight:bold}
290p.tableblock>code:only-child{background:none;padding:0}
291p.tableblock{font-size:1em}
292ol{margin-left:1.75em}
293ul li ol{margin-left:1.5em}
294dl dd{margin-left:1.125em}
295dl dd:last-child,dl dd:last-child>:last-child{margin-bottom:0}
296ol>li p,ul>li p,ul dd,ol dd,.olist .olist,.ulist .ulist,.ulist .olist,.olist .ulist{margin-bottom:.625em}
297ul.checklist,ul.none,ol.none,ul.no-bullet,ol.no-bullet,ol.unnumbered,ul.unstyled,ol.unstyled{list-style-type:none}
298ul.no-bullet,ol.no-bullet,ol.unnumbered{margin-left:.625em}
299ul.unstyled,ol.unstyled{margin-left:0}
300ul.checklist{margin-left:.625em}
301ul.checklist li>p:first-child>.fa-square-o:first-child,ul.checklist li>p:first-child>.fa-check-square-o:first-child{width:1.25em;font-size:.8em;position:relative;bottom:.125em}
302ul.checklist li>p:first-child>input[type="checkbox"]:first-child{margin-right:.25em}
303ul.inline{display:-ms-flexbox;display:-webkit-box;display:flex;-ms-flex-flow:row wrap;-webkit-flex-flow:row wrap;flex-flow:row wrap;list-style:none;margin:0 0 .625em -1.25em}
304ul.inline>li{margin-left:1.25em}
305.unstyled dl dt{font-weight:400;font-style:normal}
306ol.arabic{list-style-type:decimal}
307ol.decimal{list-style-type:decimal-leading-zero}
308ol.loweralpha{list-style-type:lower-alpha}
309ol.upperalpha{list-style-type:upper-alpha}
310ol.lowerroman{list-style-type:lower-roman}
311ol.upperroman{list-style-type:upper-roman}
312ol.lowergreek{list-style-type:lower-greek}
313.hdlist>table,.colist>table{border:0;background:none}
314.hdlist>table>tbody>tr,.colist>table>tbody>tr{background:none}
315td.hdlist1,td.hdlist2{vertical-align:top;padding:0 .625em}
316td.hdlist1{font-weight:bold;padding-bottom:1.25em}
317.literalblock+.colist,.listingblock+.colist{margin-top:-.5em}
318.colist td:not([class]):first-child{padding:.4em .75em 0;line-height:1;vertical-align:top}
319.colist td:not([class]):first-child img{max-width:none}
320.colist td:not([class]):last-child{padding:.25em 0}
321.thumb,.th{line-height:0;display:inline-block;border:solid 4px #fff;-webkit-box-shadow:0 0 0 1px #ddd;box-shadow:0 0 0 1px #ddd}
322.imageblock.left{margin:.25em .625em 1.25em 0}
323.imageblock.right{margin:.25em 0 1.25em .625em}
324.imageblock>.title{margin-bottom:0}
325.imageblock.thumb,.imageblock.th{border-width:6px}
326.imageblock.thumb>.title,.imageblock.th>.title{padding:0 .125em}
327.image.left,.image.right{margin-top:.25em;margin-bottom:.25em;display:inline-block;line-height:0}
328.image.left{margin-right:.625em}
329.image.right{margin-left:.625em}
330a.image{text-decoration:none;display:inline-block}
331a.image object{pointer-events:none}
332sup.footnote,sup.footnoteref{font-size:.875em;position:static;vertical-align:super}
333sup.footnote a,sup.footnoteref a{text-decoration:none}
334sup.footnote a:active,sup.footnoteref a:active{text-decoration:underline}
335#footnotes{padding-top:.75em;padding-bottom:.75em;margin-bottom:.625em}
336#footnotes hr{width:20%;min-width:6.25em;margin:-.25em 0 .75em;border-width:1px 0 0}
337#footnotes .footnote{padding:0 .375em 0 .225em;line-height:1.3334;font-size:.875em;margin-left:1.2em;margin-bottom:.2em}
338#footnotes .footnote a:first-of-type{font-weight:bold;text-decoration:none;margin-left:-1.05em}
339#footnotes .footnote:last-of-type{margin-bottom:0}
340#content #footnotes{margin-top:-.625em;margin-bottom:0;padding:.75em 0}
341.gist .file-data>table{border:0;background:#fff;width:100%;margin-bottom:0}
342.gist .file-data>table td.line-data{width:99%}
343div.unbreakable{page-break-inside:avoid}
344.big{font-size:larger}
345.small{font-size:smaller}
346.underline{text-decoration:underline}
347.overline{text-decoration:overline}
348.line-through{text-decoration:line-through}
349.aqua{color:#00bfbf}
350.aqua-background{background:#00fafa}
351.black{color:#000}
352.black-background{background:#000}
353.blue{color:#0000bf}
354.blue-background{background:#0000fa}
355.fuchsia{color:#bf00bf}
356.fuchsia-background{background:#fa00fa}
357.gray{color:#606060}
358.gray-background{background:#7d7d7d}
359.green{color:#006000}
360.green-background{background:#007d00}
361.lime{color:#00bf00}
362.lime-background{background:#00fa00}
363.maroon{color:#600000}
364.maroon-background{background:#7d0000}
365.navy{color:#000060}
366.navy-background{background:#00007d}
367.olive{color:#606000}
368.olive-background{background:#7d7d00}
369.purple{color:#600060}
370.purple-background{background:#7d007d}
371.red{color:#bf0000}
372.red-background{background:#fa0000}
373.silver{color:#909090}
374.silver-background{background:#bcbcbc}
375.teal{color:#006060}
376.teal-background{background:#007d7d}
377.white{color:#bfbfbf}
378.white-background{background:#fafafa}
379.yellow{color:#bfbf00}
380.yellow-background{background:#fafa00}
381span.icon>.fa{cursor:default}
382a span.icon>.fa{cursor:inherit}
383.admonitionblock td.icon [class^="fa icon-"]{font-size:2.5em;text-shadow:1px 1px 2px rgba(0,0,0,.5);cursor:default}
384.admonitionblock td.icon .icon-note::before{content:"\f05a";color:#19407c}
385.admonitionblock td.icon .icon-tip::before{content:"\f0eb";text-shadow:1px 1px 2px rgba(155,155,0,.8);color:#111}
386.admonitionblock td.icon .icon-warning::before{content:"\f071";color:#bf6900}
387.admonitionblock td.icon .icon-caution::before{content:"\f06d";color:#bf3400}
388.admonitionblock td.icon .icon-important::before{content:"\f06a";color:#bf0000}
389.conum[data-value]{display:inline-block;color:#fff!important;background:rgba(0,0,0,.8);-webkit-border-radius:100px;border-radius:100px;text-align:center;font-size:.75em;width:1.67em;height:1.67em;line-height:1.67em;font-family:"Open Sans","DejaVu Sans",sans-serif;font-style:normal;font-weight:bold}
390.conum[data-value] *{color:#fff!important}
391.conum[data-value]+b{display:none}
392.conum[data-value]::after{content:attr(data-value)}
393pre .conum[data-value]{position:relative;top:-.125em}
394b.conum *{color:inherit!important}
395.conum:not([data-value]):empty{display:none}
396dt,th.tableblock,td.content,div.footnote{text-rendering:optimizeLegibility}
397h1,h2,p,td.content,span.alt{letter-spacing:-.01em}
398p strong,td.content strong,div.footnote strong{letter-spacing:-.005em}
399p,blockquote,dt,td.content,span.alt{font-size:1.0625rem}
400p{margin-bottom:1.25rem}
401.sidebarblock p,.sidebarblock dt,.sidebarblock td.content,p.tableblock{font-size:1em}
402.exampleblock>.content{background:#fffef7;border-color:#e0e0dc;-webkit-box-shadow:0 1px 4px #e0e0dc;box-shadow:0 1px 4px #e0e0dc}
403.print-only{display:none!important}
404@page{margin:1.25cm .75cm}
405@media print{*{-webkit-box-shadow:none!important;box-shadow:none!important;text-shadow:none!important}
406html{font-size:80%}
407a{color:inherit!important;text-decoration:underline!important}
408a.bare,a[href^="#"],a[href^="mailto:"]{text-decoration:none!important}
409a[href^="http:"]:not(.bare)::after,a[href^="https:"]:not(.bare)::after{content:"(" attr(href) ")";display:inline-block;font-size:.875em;padding-left:.25em}
410abbr[title]::after{content:" (" attr(title) ")"}
411pre,blockquote,tr,img,object,svg{page-break-inside:avoid}
412thead{display:table-header-group}
413svg{max-width:100%}
414p,blockquote,dt,td.content{font-size:1em;orphans:3;widows:3}
415h2,h3,#toctitle,.sidebarblock>.content>.title{page-break-after:avoid}
416#toc,.sidebarblock,.exampleblock>.content{background:none!important}
417#toc{border-bottom:1px solid #dddddf!important;padding-bottom:0!important}
418body.book #header{text-align:center}
419body.book #header>h1:first-child{border:0!important;margin:2.5em 0 1em}
420body.book #header .details{border:0!important;display:block;padding:0!important}
421body.book #header .details span:first-child{margin-left:0!important}
422body.book #header .details br{display:block}
423body.book #header .details br+span::before{content:none!important}
424body.book #toc{border:0!important;text-align:left!important;padding:0!important;margin:0!important}
425body.book #toc,body.book #preamble,body.book h1.sect0,body.book .sect1>h2{page-break-before:always}
426.listingblock code[data-lang]::before{display:block}
427#footer{padding:0 .9375em}
428.hide-on-print{display:none!important}
429.print-only{display:block!important}
430.hide-for-print{display:none!important}
431.show-for-print{display:inherit!important}}
432@media print,amzn-kf8{#header>h1:first-child{margin-top:1.25rem}
433.sect1{padding:0!important}
434.sect1+.sect1{border:0}
435#footer{background:none}
436#footer-text{color:rgba(0,0,0,.6);font-size:.9em}}
437@media amzn-kf8{#header,#content,#footnotes,#footer{padding:0}}
438</style>
439</head>
440<body class="manpage">
441<div id="header">
442<h1>couchbase-cli-user-manage(1) Manual Page</h1>
443<h2 id="_name">NAME</h2>
444<div class="sectionbody">
445<p>couchbase-cli-user-manage - Manage RBAC users</p>
446</div>
447</div>
448<div id="content">
449<div class="sect1">
450<h2 id="_synopsis">SYNOPSIS</h2>
451<div class="sectionbody">
452<div class="verseblock">
453<pre class="content"><em>couchbase-cli user-manage</em> [--cluster &lt;url&gt;] [--username &lt;user&gt;]
454    [--password &lt;password&gt;] [--delete] [--list] [--my-roles] [--set]
455    [--rbac-username &lt;username&gt;] [--rbac-password &lt;password&gt;]
456    [--rbac-name &lt;name&gt;] [--roles &lt;roles_list&gt;] [--auth_domain &lt;domain&gt;]</pre>
457</div>
458</div>
459</div>
460<div class="sect1">
461<h2 id="_description">DESCRIPTION</h2>
462<div class="sectionbody">
463<div class="paragraph">
464<p>This command allows administrators to assign and manage roles to different users
465in their organization. Users can either be managed locally by Couchbase or
466externally through the use of an external domain.</p>
467</div>
468</div>
469</div>
470<div class="sect1">
471<h2 id="_options">OPTIONS</h2>
472<div class="sectionbody">
473<div class="dlist">
474<dl>
475<dt class="hdlist1">-c</dt>
476<dt class="hdlist1">--cluster</dt>
477<dd>
478<p>Specifies the hostname of a node in the cluster. See the HOST FORMATS
479section for more information on specifying a hostname.</p>
480</dd>
481<dt class="hdlist1">-u</dt>
482<dt class="hdlist1">--user &lt;username&gt;</dt>
483<dd>
484<p>Specifies the username of the user executing the command. If you do not have
485a user account with permission to execute the command then it will fail with
486an unauthorized error.</p>
487</dd>
488<dt class="hdlist1">-p</dt>
489<dt class="hdlist1">--password &lt;password&gt;</dt>
490<dd>
491<p>Specifies the password of the user executing the command. If you do not have
492a user account with permission to execute the command then it will fail with
493an unauthorized error. If this argument is specified, but no password is
494given then the command will prompt the user for a password through
495non-echoed stdin. You may also specify your password by using the
496environment variable CB_REST_PASSWORD.</p>
497</dd>
498<dt class="hdlist1">--delete</dt>
499<dd>
500<p>Deletes an RBAC user profile from the cluster. You must have full
501administrator privileges in order to delete a user profile.</p>
502</dd>
503<dt class="hdlist1">--list</dt>
504<dd>
505<p>Lists all RBAC user profiles in the cluster and show their roles. You must
506have full administrator privileges in order to list all user profiles.</p>
507</dd>
508<dt class="hdlist1">--my-roles</dt>
509<dd>
510<p>Shows the current users RBAC user profile.</p>
511</dd>
512<dt class="hdlist1">--set</dt>
513<dd>
514<p>Creates or updates an RBAC user profile. You must have full administrator
515privileges in order to create or update a user profile.</p>
516</dd>
517<dt class="hdlist1">--rbac-username &lt;username&gt;</dt>
518<dd>
519<p>Specifies the username of the RBAC user to modify. This option is used when
520deleting, creating, or updating an RBAC user profile.</p>
521</dd>
522<dt class="hdlist1">--rbac-password &lt;password&gt;</dt>
523<dd>
524<p>Specifies the password to be used for an RBAC user profile. This option is
525used only when creating or updating a <em>local</em> RBAC user profile. Couchbase
526does not store password for <em>external</em> RBAC roles.</p>
527</dd>
528<dt class="hdlist1">--rbac-name &lt;name&gt;</dt>
529<dd>
530<p>Specifies the name to be used for an RBAC user profile. This option is used
531when creating or updating an RBAC user profile and it is recommanded that
532this option be set to the users full name.</p>
533</dd>
534<dt class="hdlist1">--roles &lt;roles_list&gt;</dt>
535<dd>
536<p>Specifies the roles to be given to an RBAC user profile. This option is used
537when creating or updating an RBAC user profile and it is specified as a
538comma separated list of roles. See the ROLES section for more details on the
539available roles in Couchbase.</p>
540</dd>
541<dt class="hdlist1">--auth-domain &lt;domain&gt;</dt>
542<dd>
543<p>Specifies the auth_domain to used for an RBAC user profile. This option is
544used when deleting, creating or updating an RBAC user profile and it if may
545be set to either <em>local</em> or <em>external</em>. Local users are users that are
546managed directly by the Couchbase cluster. External users are users
547managed by an external source such as LDAP.</p>
548</dd>
549</dl>
550</div>
551</div>
552</div>
553<div class="sect1">
554<h2 id="_host_formats">HOST FORMATS</h2>
555<div class="sectionbody">
556<div class="paragraph">
557<p>When specifying a host for the couchbase-cli command the following formats are expected:</p>
558</div>
559<div class="ulist">
560<ul>
561<li>
562<p><code>couchbase://&lt;addr&gt;</code></p>
563</li>
564<li>
565<p><code>&lt;addr&gt;:&lt;port&gt;</code></p>
566</li>
567<li>
568<p><code>http://&lt;addr&gt;:&lt;port&gt;</code></p>
569</li>
570</ul>
571</div>
572<div class="paragraph">
573<p>It is recommended to use the couchbase://&lt;addr&gt; format for standard
574installations. The other two formats allow an option to take a port number which
575is needed for non-default installations where the admin port has been set up on
576a port other that 8091.</p>
577</div>
578<div class="sect2">
579<h3 id="_roles">ROLES</h3>
580<div class="dlist">
581<div class="title">Cluster-Wide Roles:</div>
582<dl>
583<dt class="hdlist1">admin</dt>
584<dd>
585<p>Give the user permissions to manage all Couchbase configuration settings,
586and read and write all data in the cluster. This user can make changes to
587anything in the cluster.</p>
588</dd>
589<dt class="hdlist1">bucket_admin[&#8230;&#8203;]</dt>
590<dd>
591<p>Gives the user permissions to manage bucket settings. This role can be
592assigned globally to all buckets or to a particular bucket. For XDCR
593operations, the user can start/stop replication for the buckets they
594administer, but they cannot set up the XDCR cluster references. To give
595a user the ability to manage all bucket settings set their role to
596bucket_admin[*]. To give the user permission to manage bucket settings on a
597single bucket named <em>default</em> then specify the role as
598bucket_admin[default]. If the user needs to be manage multiple buckets, for
599example <em>default</em> and <em>app</em>, then set the role as bucket[default],bucket[app].</p>
600</dd>
601<dt class="hdlist1">cluster_admin</dt>
602<dd>
603<p>Gives the user permissions to read, write and manage all cluster-level
604settings except security.</p>
605</dd>
606<dt class="hdlist1">replication_admin</dt>
607<dd>
608<p>Allows the user to configure XDCR topology and manage XDCR replications.</p>
609</dd>
610<dt class="hdlist1">ro_admin</dt>
611<dd>
612<p>Gives the user read-only access and cannot make any changes to the system.
613This user has read-only access to cluster overview, design documents
614(without the ability to create or query views), bucket summaries (without
615the ability to create or view documents), XDCR cluster references, XDCR
616replications, and cluster settings.</p>
617</dd>
618<dt class="hdlist1">view_admin[&#8230;&#8203;]</dt>
619<dd>
620<p>Gives the user privileges to define views and then run these views on data
621to ensure that views are defined properly. This applies both to the
622map-reduce and spatial views. To give a user the ability to manage views on
623all buckets set their role to views_admin[*]. To give the user permission to
624manage views on a single bucket named <em>default</em> then specify the role as
625views_admin[default]. If the user needs to be manage views for multiple
626buckets, for example <em>default</em> and <em>app</em>, then set the role as
627views_admin[default],views_admin[app].</p>
628</dd>
629</dl>
630</div>
631<div class="dlist">
632<div class="title">Data Service Roles:</div>
633<dl>
634<dt class="hdlist1">data_reader[&#8230;&#8203;]</dt>
635<dd>
636<p>Gives the user permission to read data through Couchbases key-value APIs.
637To give a user read-only access for all buckets set their role to
638data_reader[*]. To give the user read-only access to data on a single
639bucket named <em>default</em> then specify their role as data_reader[default].
640If the user needs read-only access to data for multiple buckets, for example
641<em>default</em> and <em>app</em>, then set their role as
642data_reader[default],data_reader[app].</p>
643</dd>
644<dt class="hdlist1">data_writer[&#8230;&#8203;]</dt>
645<dd>
646<p>Gives the user permission to read and write data through Couchbases
647key-value APIs. The user cannot however modify the settings of a bucket.
648To give a user read-write access for all buckets set their role to
649data_writer[*]. To give the user read-write access to data on a single
650bucket named <em>default</em> then specify their role as data_writer[default].
651If the user needs read-write access to data for multiple buckets, for
652example <em>default</em> and <em>app</em>, then set their role as
653data_writer[default,app].</p>
654</dd>
655<dt class="hdlist1">data_dcp_reader[&#8230;&#8203;]</dt>
656<dd>
657<p>Gives the user permission to create Couchbase DCP connections. To give a
658user the ability to create DCP connections for all buckets set their role to
659data_dcp_reader[*]. To give the user the ability to create DCP connections
660on a single bucket named <em>default</em> then specify their role as
661data_dcp_reader[default]. If the user needs to be able to create DCP
662connections for multiple buckets, for example <em>default</em> and <em>app</em>, then set
663their role as data_dcp_reader[default],data_dcp_reader[app].</p>
664</dd>
665<dt class="hdlist1">data_backup[&#8230;&#8203;]</dt>
666<dd>
667<p>Gives the user permission to backup and restore data in Couchbase. To give a
668user the ability to backup and restore data for all buckets set their role
669to data_backup[*]. To give the user the ability to backup and restore data
670on a single bucket named <em>default</em> then specify their role as
671data_backup[default]. If the user needs to be able to backup and restore
672data for multiple buckets, for example <em>default</em> and <em>app</em>, then set their
673role as data_backup[default],data_backup[app].</p>
674</dd>
675<dt class="hdlist1">data_monitoring[&#8230;&#8203;]</dt>
676<dd>
677<p>Gives the user permission to read monitoring data related to the data
678service in Couchbase. To give a user the ability to monitor data for all
679buckets set their role to data_monitoring[*]. To give the user the ability
680to monitor data on a single bucket named <em>default</em> then specify their role
681as data_monitoring[default]. If the user needs to be able to monitor data
682for multiple buckets, for example <em>default</em> and <em>app</em>, then set their role
683as data_monitoring[default],data_monitoring[app].</p>
684</dd>
685</dl>
686</div>
687<div class="dlist">
688<div class="title">Full Text Service Roles:</div>
689<dl>
690<dt class="hdlist1">fts_admin[&#8230;&#8203;]</dt>
691<dd>
692<p>Gives the user full administrator access for the Full Text Indexing service
693for the specified buckets. To give a user full administrator access for FTS
694on all buckets set their role to fts_admin[*]. To give the user full
695administrator access for FTS on a single bucket named <em>default</em> then specify
696their role as fts_admin[default]. If the user needs full administrator
697access for FTS for multiple buckets, for example <em>default</em> and <em>app</em>, then
698set their role as fts_admin[default],fts_admin[app].</p>
699</dd>
700<dt class="hdlist1">fts_searcher[&#8230;&#8203;]</dt>
701<dd>
702<p>Allows the user to query full text indexes for the specified buckets. To
703give a user the ability to query full text indexes on all buckets set their
704role to fts_searcher[*]. To give the ability to query FTS indexes on a
705single bucket named <em>default</em> then specify their role as
706fts_searcher[default]. If the user needs to query FTS indexes on multiple
707multiple buckets, for example <em>default</em> and <em>app</em>, then set their role as
708fts_searcher[default],fts_searcher[app].</p>
709</dd>
710</dl>
711</div>
712<div class="dlist">
713<div class="title">Query Service Roles:</div>
714<dl>
715<dt class="hdlist1">manage_index[&#8230;&#8203;]</dt>
716<dd>
717<p>Allows the user to create and delete indexes on the specified buckets. To
718give a user the ability to create and delete indexes on all buckets set
719their role to manage_index[*]. To give the user permission to create and
720delete indexes on a single bucket named <em>default</em> then specify their role
721as manage_index[default]. If the user needs to be create and delete indexes
722for multiple buckets, for example <em>default</em> and <em>app</em>, then set their role
723as manage_index[default],manage_index[app].</p>
724</dd>
725<dt class="hdlist1">query_delete[&#8230;&#8203;]</dt>
726<dd>
727<p>Allows the user to execute DELETE query statements on the specified buckets.
728To give a user the ability execute DELETE statements on all buckets set
729their role to query_delete[*]. To give the user permission to execute
730DELETE statements on a single bucket named <em>default</em> then specify their role
731as query_delete[default]. If the user needs to be execute DELETE statements
732for multiple buckets, for example <em>default</em> and <em>app</em>, then set their role
733as query_delete[default],query_delete[app].</p>
734</dd>
735<dt class="hdlist1">query_insert[&#8230;&#8203;]</dt>
736<dd>
737<p>Allows the user to execute INSERT query statements on the specified buckets.
738To give a user the ability execute INSERT statements on all buckets set
739their role to query_insert[*]. To give the user permission to execute
740INSERT statements on a single bucket named <em>default</em> then specify their role
741as query_insert[default]. If the user needs to be execute INSERT statements
742for multiple buckets, for example <em>default</em> and <em>app</em>, then set their role
743as query_insert[default],query_insert[app].</p>
744</dd>
745<dt class="hdlist1">query_select[&#8230;&#8203;]</dt>
746<dd>
747<p>Allows the user to execute SELECT query statements on the specified buckets.
748To give a user the ability execute SELECT statements on all buckets set
749their role to query_select[*]. To give the user permission to execute
750SELECT statements on a single bucket named <em>default</em> then specify their role
751as query_select[default]. If the user needs to be execute SELECT statements
752for multiple buckets, for example <em>default</em> and <em>app</em>, then set their role
753as query_select[default],query_select[app].</p>
754</dd>
755<dt class="hdlist1">query_update[&#8230;&#8203;]</dt>
756<dd>
757<p>Allows the user to execute UPDATE query statements on the specified buckets.
758To give a user the ability execute UPDATE statements on all buckets set
759their role to query_update[*]. To give the user permission to execute
760UPDATE statements on a single bucket named <em>default</em> then specify their role
761as query_update[default]. If the user needs to be execute UPDATE statements
762for multiple buckets, for example <em>default</em> and <em>app</em>, then set their role
763as query_update[default],query_update[app].</p>
764</dd>
765<dt class="hdlist1">system_catalog[&#8230;&#8203;]</dt>
766<dd>
767<p>Allows the users to run queries against the system catalog on the specified
768buckets. To give a user the ability to run queries against the system
769catalog on all buckets set their role to system_catalog[*]. To give the user
770permission to run queries against the system catalog on a single bucket
771named <em>default</em> then specify their role as system_catalog[default]. If the
772user needs to be run queries against the system catalog for multiple
773buckets, for example <em>default</em> and <em>app</em>, then set their role as
774system_catalog[default],system_catalog[app].</p>
775</dd>
776</dl>
777</div>
778</div>
779</div>
780</div>
781<div class="sect1">
782<h2 id="_examples">EXAMPLES</h2>
783<div class="sectionbody">
784<div class="paragraph">
785<p>To create an local RBAC user profile for a user named "John Doe" with username
786jdoe and password cbpass with roles to manage the <em>default</em> bucket and all
787XDCR replication run the following command</p>
788</div>
789<div class="literalblock">
790<div class="content">
791<pre>$ couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator \
792 -p password --set --rbac-username jdoe --rbac-password cbpass \
793 --rbac-name "John Doe" --roles bucket_admin[default],replication_admin \
794 --auth-domain local</pre>
795</div>
796</div>
797<div class="paragraph">
798<p>If you have external user source setup in your cluster and you want to add a
799user "John Doe" with username jdoe who should have the ability to manage only
800views for all bucket run the following command</p>
801</div>
802<div class="literalblock">
803<div class="content">
804<pre>$ couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator \
805 -p password --set --rbac-username jdoe --rbac-name "John Doe" \
806 --roles view_admin[*] --auth-domain external</pre>
807</div>
808</div>
809<div class="paragraph">
810<p>To list the current RBAC user profiles run the following command.</p>
811</div>
812<div class="literalblock">
813<div class="content">
814<pre>$ couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator \
815 -p password --list</pre>
816</div>
817</div>
818<div class="paragraph">
819<p>To delete an external user named jdoe run the following command.</p>
820</div>
821<div class="literalblock">
822<div class="content">
823<pre>$ couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator \
824 -p password --delete --rbac-username jdoe --auth-domain external</pre>
825</div>
826</div>
827<div class="paragraph">
828<p>To delete a local user named jdoe run the following command.</p>
829</div>
830<div class="literalblock">
831<div class="content">
832<pre>$ couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator \
833 -p password --delete --rbac-username jdoe --auth-domain local</pre>
834</div>
835</div>
836<div class="paragraph">
837<p>To see the user profile for a user with the username jdoe and password cbpass
838run the following command.</p>
839</div>
840<div class="literalblock">
841<div class="content">
842<pre>$ couchbase-cli user-manage -c 127.0.0.1:8091 -u jdoe -p cbpass \
843 --my-roles</pre>
844</div>
845</div>
846</div>
847</div>
848<div class="sect1">
849<h2 id="_environment_and_configuration_variables">ENVIRONMENT AND CONFIGURATION VARIABLES</h2>
850<div class="sectionbody">
851<div class="dlist">
852<dl>
853<dt class="hdlist1">CB_REST_USERNAME</dt>
854<dd>
855<p>Specifies the username to use when executing the command. This environment
856variable allows you to specify a default argument for the -u/--username
857argument on the command line.</p>
858</dd>
859<dt class="hdlist1">CB_REST_PASSWORD</dt>
860<dd>
861<p>Specifies the password of the user executing the command. This environment
862variable allows you to specify a default argument for the -p/--password
863argument on the command line. It also allows the user to ensure that their
864password are not cached in their command line history.</p>
865</dd>
866</dl>
867</div>
868</div>
869</div>
870<div class="sect1">
871<h2 id="_see_also">SEE ALSO</h2>
872<div class="sectionbody">
873<div class="paragraph">
874<p><a href="couchbase-cli-setting-ldap.html">couchbase-cli-setting-ldap(1)</a></p>
875</div>
876</div>
877</div>
878<div class="sect1">
879<h2 id="_couchbase_cli">COUCHBASE-CLI</h2>
880<div class="sectionbody">
881<div class="paragraph">
882<p>Part of the <a href="couchbase-cli.html">couchbase-cli(1)</a> suite</p>
883</div>
884</div>
885</div>
886</div>
887</body>
888</html>