Configuring Fine-Grained Permissions for a Graph

Configuring Permissions

1. Before setting up fine-grained permissions, ensure that user groups are properly configured. Refer to Configuring a GES User Group for detailed instructions.
2. In the navigation pane on the left, choose Granular Permissions > Permission Configuration.
3. On the Permission Configuration page, you will see a list of graphs currently in the Running state. For each graph, the following details are displayed: graph name, fine-grained permission status, last time permissions were enabled, available actions.
   Figure 1 Configuring granular permissions
   
   

   1. Only graphs with a Running state will appear on this page.
   2. You can filter graphs by name in the upper right corner of the page.
4. Select the graph for which you want to configure permissions. In its Operation column, click Set Permission to access the Set Permission page (refer to Figure 2). Here, you can create metadata permissions and fine-grained graph permissions.
   Figure 2 Permission configuration (page for memory edition and database edition graphs of versions earlier than 2.4.9)
   
   Figure 3 Permission configuration (page for memory edition and database edition graphs of version 2.4.9 or later)
   
5. Create write permissions for metadata.
   Click Create under Metadata Write Permission. Once created, this allows modifications to all labels within the metadata.

   Figure 4 Creating permission
   
6. Create fine-grained graph permissions.
   Click Create Policy under Granular Permission Policy and configure the following parameters:

   • Policy Name: Enter a custom name or use the default.
   • View: Choose between Form or Code.
     • Form is ideal for intuitive, visual configuration.
     • Code is recommended for precise settings.
   • Permissions: Assign access rights to selected labels for graph resources. You can also configure read and write permissions for specific label properties.
     

     To enable Cypher query function, both metadata permissions must be created and all labels (including the default __DEFAULT__ label) must have read and write permissions assigned during graph permission setup.

     Figure 5 Configuring permissions
     
7. Click Save. The system will redirect you back to the Set Permission page, where the newly created permissions will be listed under the Granular Permission Policy pane.
   Figure 6 Created policies
   

Associating Permissions with a User Group

Associate the created permissions with specific user groups, ensuring that group members can access graph resources based on the assigned permissions.

1. On the Set Permission page, select the newly created graph permission and click Associate User Group in its Operation column.
2. Choose the user group you want to grant permissions to.
   Figure 7 Associating with a user group
   
3. Click OK. On the Granular Permission Policy pane, you can view the number of users currently authorized with this permission.
   Figure 8 Users granted the permission
   

Enabling Fine-Grained Permissions

1. In the upper right corner of the Set Permission page, enable Fine-Grained Permissions.

   

2. Return to the previous page. On the Granular Permissions page, you will see that granular permissions for the graph are now enabled.