Skip to main content

Administrating MarkLogic Server

Appendix B: Pre-defined Execute Privileges

The pre-defined execute privileges listed below are included with every installation of MarkLogic Server:

Name

Action URI

Description

Protects Function

add-query-rolesets

http://marklogic.com/xdmp/privileges/add-query-rolesets

privilege to add query rolesets

sec:add-query-rolesets

admin-database

http://marklogic.com/xdmp/privileges/admin/database

privilege to administer databases

admin built-ins

admin-default-read

http://marklogic.com/xdmp/privileges/admin-default-read

internal privilege to use the Admin API for reading configuration information

admin built-ins

admin-forest

http://marklogic.com/xdmp/privileges/admin/forest

privilege to administer forests

admin built-ins

admin-host

http://marklogic.com/xdmp/privileges/admin/host

privilege to administer hosts

admin built-ins

admin-app-server

http://marklogic.com/xdmp/privileges/admin/app-server

privilege to administer app-servers

admin built-ins

admin-app-server-security

http://marklogic.com/xdmp/privileges/admin/app-server-security

privilege to administer app-servers’ security

admin built-ins

admin-group

http://marklogic.com/xdmp/privileges/admin/group

privilege to administer groups

admin built-ins

admin-group-security

http://marklogic.com/xdmp/privileges/admin/group-security

privilege to administer groups’ security

admin built-ins

admin-cluster

http://marklogic.com/xdmp/privileges/admin/cluster

privilege to administer clusters

admin built-ins

admin-mimetype

http://marklogic.com/xdmp/privileges/admin/mimetypes

privilege to administer mimetypes

admin built-ins

admin-module-read

http://marklogic.com/xdmp/privileges/admin-module-read

privilege to use the Admin API for reading configuration information

admin built-ins

admin-module-write

http://marklogic.com/xdmp/privileges/admin-module-write

privilege to use the Admin API for writing configuration information

admin built-ins

admin-ui

http://marklogic.com/xdmp/privileges/admin-ui

privilege to view the Admin Interface, but not to make changes

admin built-ins

amp-add-roles

http://marklogic.com/xdmp/privileges/amp-add-roles

privilege to assign additional roles to the amp

sec:amp-add-roles

amp-change-database

http://marklogic.com/xdmp/privileges/amp-change-database

privilege to assign additional roles to the amp

sec:amps-change-modules-database

amp-get-roles

http://marklogic.com/xdmp/privileges/amp-get-roles

privilege to get the roles associated with the amp

sec:amp-get-roles

amp-remove-roles

http://marklogic.com/xdmp/privileges/amp-remove-roles

privilege to remove roles assigned to the amp

sec:amp-remove-roles

amp-set-roles

http://marklogic.com/xdmp/privileges/amp-set-roles

privilege to set the roles associated with the amp

sec-amp-set-roles

any-collection

http://marklogic.com/xdmp/privileges/any-collection

privilege to add to or remove from any collection, regardless of whether it is protected

xdmp:document-add-collections, xdmp:document-remove-collections, xdmp:document-set-collections

any-transaction-locks

http://marklogic.com/xdmp/privileges/any-transaction-locks

privilege to see URIs currently locked for read or write by a transaction.

xdmp:transaction-locks

any-uri

http://marklogic.com/xdmp/privileges/any-uri

privilege to create a document with any uri, regardless of whether the uri is protected

xdmp:document-insert, xdmp:document-load, xdmp:load

app-builder

http://marklogic.com/xdmp/privileges/app-builder

privilege to use the Application Builder UI

App Builder is no longer part of MarkLogic

appservices-cache-server-fields

http://marklogic.com/xdmp/privileges/appservices-cache-server-fields

cancel-any-requests

http://marklogic.com/xdmp/privileges/cancel-any-requests

privilege to cancel requests issued by any user attempting to cancel a request

admin built-ins

cancel-my-requests

http://marklogic.com/xdmp/privileges/cancel-my-requests

privilege to cancel requests issued by the user attempting to cancel a request

admin built-ins

clang:read

http://marklogic.com/xdmp/privileges/custom-language-read

privilege to read custom language configuration specifications

clang:language-config-read

clang:write

http://marklogic.com/xdmp/privileges/custom-language-write

privilege to write custom language configuration specifications

clang:language-config-write

collection-add-permissions

http://marklogic.com/xdmp/privileges/collection-add-permissions

privilege to add permissions to a collection

sec:get-collections, sec:collection-add-permissions

collection-get-permissions

http://marklogic.com/xdmp/privileges/collection-get-permissions

privilege to get permissions on a collection

sec:collection-get-permissions

collection-remove-permissions

http://marklogic.com/xdmp/privileges/collection-remove-permissions

privilege to remove permissions from a collection

sec:get-collections, sec:collection-remove-permissions

collection-set-permissions

http://marklogic.com/xdmp/privileges/collection-set-permissions

privilege to set permissions on a collection

sec:get-collections, sec:collection-set-permissions

compartment-get-roles

http://marklogic.com/xdmp/privileges/compartment-get-roles

privilege to get roles on a compartment

sec:compartment-get-roles

complete-any-transactions

http://marklogic.com/xdmp/privileges/complete-any-transactions

privilege to use transaction built-ins for any transactions

xdmp:transaction-commit, xdmp:xa-complete

complete-my-transactions

http://marklogic.com/xdmp/privileges/complete-my-transactions

privilege to use transaction built-ins for transactions started by the current user

xdmp:transaction-commit, xdmp:xa-complete

count-builtins

http://marklogic.com/xdmp/privileges/counts

privilege to run xdmp:forest-counts

xdmp:forest-counts

create-amp

http://marklogic.com/xdmp/privileges/create-amp

privilege to create an amp

sec:create-amp

create-credential

http://marklogic.com/xdmp/privileges/create-credential

privilege to create security credentials

sec:create-credential

create-data-role

http://marklogic.com/xdmp/privileges/create-data-role

privilege for non-admin users (with manage role) to create and manage roles

create-data-user

http://marklogic.com/xdmp/privileges/create-data-user

privilege for non-admin users (with manage role) to create and manage users

create-domain

http://marklogic.com/xdmp/privileges/create-domain

privilege to create domains

dom:create

create-external-security

http://marklogic.com/xdmp/privileges/create-external-security

privilege to create an external authentication configuration

sec:create-external-security

create-pipeline

http://marklogic.com/xdmp/privileges/create-pipeline

privilege to create a pipeline

p:insert, p:create

create-privilege

http://marklogic.com/xdmp/privileges/create-privilege

privilege to create a privilege

sec:create-role

create-role

http://marklogic.com/xdmp/privileges/create-role

privilege to create a role

sec:create-role

create-trigger

http://marklogic.com/xdmp/privileges/create-trigger

privilege to create a trigger

trgr:create-trigger

create-user

http://marklogic.com/xdmp/privileges/create-user

privilege to create a user

sec:create-user

credential-get-certificate

http://marklogic.com/xdmp/privileges/credential-get-certificate

privilege to return the certificate for a credential

sec:credential-get-certificate

credential-get-description

http://marklogic.com/xdmp/privileges/credential-get-description

privilege to return the description of a credential

sec:credential-get-description

credential-get-id

http://marklogic.com/xdmp/privileges/credential-get-id

privilege to return the id of a credential

sec:credential-get-id

credential-get-password

http://marklogic.com/xdmp/privileges/credential-get-password

privilege to return the password for a credential

sec:credential-get-password

credential-get-permissions

http://marklogic.com/xdmp/privileges/credential-get-permissions

privilege to return the permissions for a credential

sec:credential-get-permissions

credential-get-private-key

http://marklogic.com/xdmp/privileges/credential-get-private-key

privilege to return the private key for a credential

sec:credential-get-private-key

credential-get-signing

http://marklogic.com/xdmp/privileges/credential-get-signing

privilege to return the signing flag for a credential

sec:credential-get-signing

credential-get-targets

http://marklogic.com/xdmp/privileges/credential-get-targets

privilege to return the targets for a credential

sec:credential-get-targets

credential-get-username

http://marklogic.com/xdmp/privileges/credential-get-username

privilege to return the user name for a credential

sec:credential-get-username

credential-set-certificate

http://marklogic.com/xdmp/privileges/credential-set-certificate

privilege to update the certificate for a credential

sec:credential-set-certificate

credential-set-description

http://marklogic.com/xdmp/privileges/credential-set-description

privilege to update the description for a credential

sec:credential-set-description

credential-set-name

http://marklogic.com/xdmp/privileges/credential-set-name

privilege to update the name for a credential

sec:credential-set-name

credential-set-password

http://marklogic.com/xdmp/privileges/credential-set-password

privilege to update the password for a credential

sec:credential-set-password

credential-set-permissions

http://marklogic.com/xdmp/privileges/credential-set-permissions

privilege to update the permissions for a credential

sec:credential-set-permissions

credential-set-signing

http://marklogic.com/xdmp/privileges/credential-set-signing

privilege to update the signing flag for a credential

sec:credential-set-signing

credential-set-targets

http://marklogic.com/xdmp/privileges/credential-set-targets

privilege to update the targets for a credential

sec:credential-set-targets

credential-set-username

http://marklogic.com/xdmp/privileges/credential-set-username

privilege to update the user name for a credential

sec:credential-set-username

credentials-get-aws

http://marklogic.com/xdmp/privileges/credentials-get-aws

privilege to return the Amazon Web Services access key, secret key, and session token

sec:credentials-get-aws

credentials-set-aws

http://marklogic.com/xdmp/privileges/credentials-set-aws

privilege to set the Amazon Web Services access key, secret key, and session token

sec:credentials-set-aws

cts-write-dictionary

http://marklogic.com/xdmp/privileges/cts-write-dictionary

data-role-edit-<ROLEID>

http://marklogic.com/xdmp/privileges/data-role-edit-<ROLEID>

internal privilege to edit a role created by non-admin user through create-data-role privilege

data-role-inherit-<ROLEID>

http://marklogic.com/xdmp/privileges/data-role-inherit-<ROLEID>

internal privilege to inherit a role created by non-admin user through create-data-role privilege

data-user-edit-<USERID>

http://marklogic.com/xdmp/privileges/data-user-edit-<USERID>

internal privilege to track and manage a user created by non-admin user through create-data-user privilege

database-node-query-rolesets

http://marklogic.com/xdmp/privileges/database-node-query-rolesets

privilege to return a sequence of query-rolesets

xdmp:database-node-query-rolesets

debug-any-requests

http://marklogic.com/xdmp/privileges/debug-any-requests

privilege to debug all requests from any user

debug built-ins

debug-my-requests

http://marklogic.com/xdmp/privileges/debug-my-requests

privilege to debug your own requests

debug buit-ins

dls-admin

http://marklogic.com/xdmp/privileges/dls-admin

privilege to configure the Library Services

dls:break-checkout, dls:retention-rule, dls:retention-rule-insert, dls:retention-rule-remove

dls-user

http://marklogic.com/xdmp/privileges/dls-user

privilege to use the Library Services

dls:as-of-query, dls:author-query, dls:document-add-collections, dls:document-add-permissions, dls:document-add-properties, dls:document-checkin, dls:document-checkout, dls:document-checkout-status, dls:document-delete, dls:document-extract-part, dls:document-get-permissions, dls:document-history, dls:document-include-query, dls:document-insert-and-manage, dls:document-is-managed, dls:document-manage, dls:document-purge, dls:document-remove-collections, dls:document-remove-permissions, dls:document-remove-properties, dls:document-retention-rules, dls:document-set-collections, dls:document-set-permissions, dls:document-set-properties, dls:document-set-property, dls:document-set-quality, dls:document-unmanage, dls:document-update, dls:document-version, dls:document-version-as-of, dls:document-version-delete, dls:document-version-query, dls:document-version-uri, dls:document-versions-query, dls:documents-query, dls:link-expand, dls:link-references, dls:node-expand, dls:purge, dls:retention-rules

ec2-http-protected

http://marklogic.com/xdmp/privileges/ec2-http-protected

environment-ui

http://marklogic.com/xdmp/privileges/environment-ui

external-security-clear-cache

http://marklogic.com/xdmp/privileges/external-security-clear-cache

privilege to clear the login cache in an external authorization configuration object

sec:external-security-clear-cache

external-security-get-authentication

http://marklogic.com/xdmp/privileges/external-security-get-authentication

privilege to return the authentication protocol set in an external authorization configuration object

sec:external-security-get-authentication

external-security-get-authorization

http://marklogic.com/xdmp/privileges/external-security-get-authorization

privilege to return the authorization scheme set in an external authorization configuration object

sec:external-security-get-authorization

external-security-get-cache-timeout

http://marklogic.com/xdmp/privileges/external-security-get-cache-timeout

privilege to return the login cache timeout set in an external authorization configuration object

sec:external-security-get-cache-timeout

external-security-get-description

http://marklogic.com/xdmp/privileges/external-security-get-description

privilege to return the description set in an external authorization configuration object

sec:external-security-get-description

external-security-get-http-option

http://marklogic.com/xdmp/privileges/external-security-get-http-option

privilege to return the http options set in an external authorization configuration object

sec:external-security-get-http-options

external-security-get-ldap-attribute

http://marklogic.com/xdmp/privileges/external-security-get-ldap-attribute

privilege to return the LDAP attribute for user lookup set in an external authorization configuration object

sec:external-security-get-ldap-attribute

external-security-get-ldap-base

http://marklogic.com/xdmp/privileges/external-security-get-ldap-base

privilege to return the LDAP base for user lookup set in an external authorization configuration object

sec:external-security-get-ldap-base

external-security-get-ldap-bind-method

http://marklogic.com/xdmp/privileges/external-security-get-ldap-bind-method

privilege to return the bind method set in an external authorization configuration object

sec:external-security-get-ldap-bind-method

external-security-get-ldap-default-user

http://marklogic.com/xdmp/privileges/external-security-get-ldap-default-user

privilege to return the default LDAP user name set in an external authorization configuration object

sec:external-security-get-ldap-default-user

external-security-get-ldap-member-attribute

http://marklogic.com/xdmp/privileges/external-security-get-ldap-member-attribute

privilege to return the member attribute set in an external authorization configuration object

sec:external-security-get-ldap-member-attribute

external-security-get-ldap-memberof-attribute

http://marklogic.com/xdmp/privileges/external-security-get-ldap-memberof-attribute

privilege to return the memberof attribute set in an external authorization configuration object

sec:external-security-get-ldap-memberof-attribute

external-security-get-ldap-server-uri

http://marklogic.com/xdmp/privileges/external-security-get-ldap-server-uri

privilege to return the LDAP server uri set in an external authorization configuration object

sec:external-security-get-ldap-server-uri

external-security-get-saml-attribute-names

http://marklogic.com/xdmp/privileges/external-security-get-saml-attribute-names

privilege to return the SAML attribute names set in an external authorization configuration object

sec:external-security-get-saml-attribute-names

external-security-get-saml-entity-id

http://marklogic.com/xdmp/privileges/external-security-get-saml-entity-id

privilege to return the SAML entity id set in an external authorization configuration object

sec:external-security-get-saml-entity-id

external-security-get-saml-privilege-attribute-name

http://marklogic.com/xdmp/privileges/external-security-get-saml-privilege-attribute-name

privilege to return the SAML privilege attribute name set in an external authorization configuration object

sec:external-security-get-saml-privilege-attribute-name

external-security-get-ssl-client-certificate-authorities

http://marklogic.com/xdmp/privileges/external-security-get-ssl-client-certificate-authorities

privilege to return the external security's SSL client certificate authorities set in an external authorization configuration object

sec:external-security-get-ssl-client-certificate-authorities

external-security-get-ssl-require-client-certificate

http://marklogic.com/xdmp/privileges/external-security-get-ssl-requier-client-certificate

privilege to return the external security's SSL require client certificate flag set in an external authorization configuration object

sec:external-security-get-ssl-require-client-certificate

external-security-set-authentication

http://marklogic.com/xdmp/privileges/external-security-set-authentication

privilege to set the authentication protocol in an external authorization configuration object

sec:external-security-set-authentication

external-security-set-authorization

authorization http://marklogic.com/xdmp/privileges/external-security-set-authorization

privilege to set the authorization scheme in an external authorization configuration object

sec:external-security-set-authorization

external-security-set-cache-timeout

http://marklogic.com/xdmp/privileges/external-security-set-cache-timeout

privilege to set the login cache timeout in an external authorization configuration object

sec:external-security-set-cache-timeout

external-security-set-description

http://marklogic.com/xdmp/privileges/external-security-set-description

privilege to set the description in an external authorization configuration object

sec:external-security-set-description

external-security-set-http-options

http://marklogic.com/xdmp/privileges/external-security-set-http-options

privilege to set the http options in an external authorization configuration object

sec:external-security-set-http-options

external-security-set-ldap-attribute

http://marklogic.com/xdmp/privileges/external-security-set-ldap-attribute

privilege to set the LDAP attribute for user lookup in an external authorization configuration object

sec:external-security-set-ldap-attribute

external-security-set-ldap-base

http://marklogic.com/xdmp/privileges/external-security-set-ldap-base

privilege to set the LDAP base for user lookup in an external authorization configuration object

sec:external-security-set-ldap-base

external-security-set-ldap-bind-method

http://marklogic.com/xdmp/privileges/external-security-set-ldap-bind-method

privilege to set the bind method in an external authorization configuration object

sec:external-security-set-ldap-bind-method

external-security-set-ldap-default-user

http://marklogic.com/xdmp/privileges/external-security-set-ldap-default-user

privilege to set the default user name in an external authorization configuration object

sec:external-security-set-ldap-default-user

external-security-set-ldap-member-attribute

http://marklogic.com/xdmp/privileges/external-security-set-ldap-member-attribute

privilege to set the member LDAP attribute in an external authorization configuration object

sec:external-security-set-ldap-member-attribute

external-security-set-ldap-memberof-attribute

http://marklogic.com/xdmp/privileges/external-security-set-ldap-memberof-attribute

privilege to set the memberof LDAP attribute in an external authorization configuration object

sec:external-security-set-ldap-memberof-attribute

external-security-set-ldap-password

http://marklogic.com/xdmp/privileges/external-security-set-ldap-password

privilege to set the default user password in an external authorization configuration object

sec:external-security-set-ldap-password

external-security-set-ldap-server-uri

http://marklogic.com/xdmp/privileges/external-security-set-ldap-server-uri

privilege to set the LDAP server uri in an external authorization configuration object

sec:external-security-set-ldap-server-uri

external-security-set-name

http://marklogic.com/xdmp/privileges/external-security-set-name

privilege to set the name of an external authorization configuration object

sec:external-security-set-name

external-security-set-saml-attribute-names

http://marklogic.com/xdmp/privileges/external-security-set-saml-attribute-names

privilege to set SAML attribute names used by other security objects to identify a SAML configuration

sec:external-security-set-saml-attribute-names

external-security-set-saml-entity-id

http://marklogic.com/xdmp/privileges/external-security-set-saml-entity-id

privilege to set the SAML entity ID used by other security objects to identify a SAML configuration

sec:external-security-set-saml-entity-id

external-security-set-saml-privilege-attribute-name

http://marklogic.com/xdmp/privileges/external-security-set-saml-privilege-attribute-name

privilege to set the SAML privilege attribute name in a SAML configuration

sec:external-security-set-saml-privilege-attribute-name

external-security-set-ssl-client-certificate-authorities

http://marklogic.com/xdmp/privileges/external-security-set-ssl-client-certificate-authorities

privilege to set the SSL client certificate authorities in an external authorization configuration object

sec:external-security-set-ssl-client-certificate-authorities

external-security-set-ssl-require-client-certificate

http://marklogic.com/xdmp/privileges/external-security-set-ssl-requier-client-certificate

privilege to set the SSL require client certificate flag in an external authorization configuration object

sec:external-security-set-ssl-require-client-certificate

flexrep-admin

http://marklogic.com/xdmp/privileges/flexrep-admin

privilege to administer flexible replication

flexible replication functions

flexrep-internal

http://marklogic.com/xdmp/privileges/flexrep-internal

used for amping flexible replication functions

flexible-internal

flexrep-user

http://marklogic.com/xdmp/privileges/flexrep-user

privilege to use flexible replication

flexible replication user functions

forget-any-xa-transactions

http://marklogic.com/xdmp/privileges/forget-any-xa-transactions

privilege to run built-in to forget XA transactions for any transactions

xdmp:xa-forget, xdmp:xq-forget-xid

forget-my-xa-transactions

http://marklogic.com/xdmp/privileges/forget-my-xa-transactions

privilege to run built-in to forget XA transactions for the user’s transactions

xdmp:xa-forget,

xdmp:xq-forget-xid

get-amp

http://marklogic.com/xdmp/privileges/get-amp

privilege to get an amp

sec:get-amp

get-an-admin-user-id

http://marklogic.com/xdmp/privileges/get-an-admin-user-id

privilege to get an admin user id

get-appserver-logs

http://marklogic.com/xdmp/privileges/logs/appserver

privilege to get App Server logs

get-compartments

http://marklogic.com/xdmp/privileges/get-compartments

privilege to get a the compartments

sec:get-compartments

get-credential

http://marklogic.com/xdmp/privileges/get-credential

privilege to get a PEM encoded X509 certificate

sec:get-credential

get-credential-by-id

http://marklogic.com/xdmp/privileges/get-credential-by-id

privilege to get a PEM encoded X509 certificate

get-credential-ids

http://marklogic.com/xdmp/privileges/get-credential-ids

privilege to get all of the credential IDs in the security database

get-credential-names

http://marklogic.com/xdmp/privileges/get-credential-names

privilege to get all of the credential names in the security database

get-credentials-encoded-kek

http://marklogic.com/xdmp/privileges/get-credentials-encoded-kek

get-logs

http://marklogic.com/xdmp/privileges/logs

privilege to get logs

get-privilege

http://marklogic.com/xdmp/privileges/get-privilege

privilege to get a privilege from action uri and type

sec:get-privilege

get-role-ids

http://marklogic.com/xdmp/privileges/get-role-ids

privilege to get role ids

internal functions

get-role-names

http://marklogic.com/xdmp/privileges/get-role-names

privilege to get role names

internal functions

get-saml-entity-ids

http://marklogic.com/xdmp/privileges/get-saml-entity-ids

privilege to get the SAML entity ids stored in the Security database

sec:get-saml-entity-ids

get-system-logs

http://marklogic.com/xdmp/privileges/logs/system

privilege to get system logs

get-taskserver-logs

http://marklogic.com/xdmp/privileges/logs/taskserver

privilege to get taskserver logs

get-user-names

http://marklogic.com/xdmp/privileges/get-user-names

privilege to get user names

sec:get-user-names

grant-all-roles

http://marklogic.com/xdmp/privileges/grant-all-roles

privilege to grant a user all roles. Either grant-all-roles or grant-my-roles would be needed by functions that assign roles.

sec:create-user, sec:user-set-roles, sec:user-add-roles, sec:user-remove-roles, sec:create-role, sec:role-set-roles, sec:role-add-roles, sec:role-remove-roles, sec:remove-role-from-roles, sec:remove-role-from-privileges, sec:remove-role-from-amps, sec:create-role, sec:privilege-set-roles, sec:privilege-add-roles, sec:privilege-remove-roles, sec:create-amp, sec:amp-set-roles, sec:amp-add-roles, sec:amp-remove-roles

grant-my-roles

http://marklogic.com/xdmp/privileges/grant-my-roles

privilege to grant a user my roles. Either grant-all-roles or grant-my-roles would be needed by functions that assign roles.

sec:create-user, sec:user-set-roles, sec:user-add-roles, sec:user-remove-roles, sec:create-role, sec:role-set-roles, sec:role-add-roles, sec:role-remove-roles, sec:remove-role-from-roles, sec:remove-role-from-privileges, sec:remove-role-from-amps, sec:create-role, sec:privilege-set-roles, sec:privilege-add-roles, sec:privilege-remove-roles, sec:create-amp, sec:amp-set-roles, sec:amp-add-roles, sec:amp-remove-roles

hadoop-user-read

http://marklogic.com/xdmp/privileges/hadoop-user-read

privilege to use MarkLogic Server as an input for a Hadoop MapReduce job that reads data from MarkLogic Server.

Java APIs in the Hadoop package.

hadoop-user-write

http://marklogic.com/xdmp/privileges/hadoop-user-write

privilege to use MarkLogic Server as an input for a Hadoop MapReduce job that writes data from MarkLogic Server

Java APIs in the Hadoop package.

healthcheck

http://marklogic.com/xdmp/privileges/healthcheck

privilege to use the HealthCheck App Server

infostudio

http://marklogic.com/xdmp/privileges/infostudio

privilege to use Information Studio

Information Studio is no longer part of MarkLogic

Information Studio functions

java

http://marklogic.com/xdmp/privileges/java

manage

http://marklogic.com/xdmp/privileges/manage

privilege to run the Management API

For example, non-admin users can use manage role plus create-data-role/create-data-user granular privilege to manage roles/users created by data users or granted. package:add-database, package:add-appserver, All of the resource addresses in the Management API

manage-admin

http://marklogic.com/xdmp/privileges/manage-admin

privilege to use the manage REST APIs

my-transaction-locks

http://marklogic.com/xdmp/privileges/my-transaction-locks

privilege to return URIs currently locked for read or write by a transaction

xdmp:transaction-locks

native-plugin

http://marklogic.com/xdmp/privileges/native-plugin

node-query-rolesets

http://marklogic.com/xdmp/privileges/node-query-rolesets

privilege to return query-rolesets

xdmp:node-query-rolesets

odbc:eval

http://marklogic.com/xdmp/privileges/odbc-eval

privilege to execute eval statements from odbc

xdmp:eval

odbc:eval-in

http://marklogic.com/xdmp/privileges/odbc-eval-in

privilege to execute eval-in statements from odbc

xdmp:eval-in

odbc:eval-modules-change

http://marklogic.com/xdmp/privileges/odbc-eval-modules-change

privilege to execute eval statements that change a modules database from odbc

xdmp:eval

odbc:eval-modules-change-file

http://marklogic.com/xdmp/privileges/odbc-eval-modules-change-file

privilege to execute eval statements that change a filesystem root from odbc

xdmp:eval

odbc:insert

http://marklogic.com/xdmp/privileges/odbc-insert

privilege to execute insert statements from odbc

odbc inserts

odbc:insert-in

http://marklogic.com/xdmp/privileges/odbc-insert-in

privilege to execute insert statements from odbc

odbc inserts into another database

odbc:invoke

http://marklogic.com/xdmp/privileges/odbc-invoke

privilege to execute invoke statements from odbc

odbc invokes

odbc:invoke-in

http://marklogic.com/xdmp/privileges/odbc-invoke-in

privilege to execute invoke statements from odbc

odbc invokes into another database

odbc:invoke-modules-change

http://marklogic.com/xdmp/privileges/odbc-invoke-modules-change

privilege to execute invoke statements that change a modules database from odbc

odbc invokes that change the modules database

odbc:invoke-modules-change-file

http://marklogic.com/xdmp/privileges/odbc-invoke-modules-change-file

privilege to execute invoke statements that change a filesystem root from odbc

odbc invokes that change the filesystem root

odbc:spawn

http://marklogic.com/xdmp/privileges/odbc-spawn

privilege to execute spawn statements from odbc

odbc spawns

odbc:spawn-in

http://marklogic.com/xdmp/privileges/odbc-spawn-in

privilege to execute spawn statements from odbc

odbc spawns into another database

odbc:spawn-modules-change

http://marklogic.com/xdmp/privileges/odbc-spawn-modules-change

privilege to execute spawn statements that change a modules database from odbc

odbc spawn that change the modules database

odbc:spawn-modules-change-file

http://marklogic.com/xdmp/privileges/odbc-spawn-modules-change-file

privilege to execute spawn statements that change a filesystem root from odbc

odbc spawn that change the filesystem root

path-add-permissions

http://marklogic.com/xdmp/privileges/path-add-permissions

privilege to add permissions for a protected path

sec:path-add-permissions

path-get-permissions

http://marklogic.com/xdmp/privileges/path-get-permissions

privilege to return permissions for a protected path

sec:path-get-permissions

path-remove-permissions

http://marklogic.com/xdmp/privileges/path-remove-permissions

privilege to remove permissions for a protected path

sec:path-remove-permissions

path-set-permissions

http://marklogic.com/xdmp/privileges/path-set-permissions

privilege to set permissions for a protected path

sec:path-set-permissions

pki

http://marklogic.com/xdmp/privileges/pki

privilege to use the PKI functions.

pki:create-template, pki:delete-certificate, pki:delete-template, pki:generate-certificate-request, pki:generate-template-certificate-authority, pki:generate-temporary-certificate, pki:generate-temporary-certificate-if-necessary, pki:get-certificate, pki:get-certificate-pem, pki:get-certificate-xml, pki:get-certificates, pki:get-certificates-for-template, pki:get-certificates-for-template-xml, pki:get-pending-certificate-request, pki:get-pending-certificate-requests-pem, pki:get-pending-certificate-requests-xml, pki:get-template, pki:get-template-by-name, pki:get-template-certificate-authority pki:get-template-ids, pki:get-trusted-certificate-ids, pki:insert-certificate-revocation-list, pki:insert-signed-certificates, pki:insert-template, pki:insert-trusted-certificates, pki:is-temporary, pki:need-certificate, pki:template-get-description, pki:template-get-id, pki:template-get-key-options, pki:template-get-key-type, pki:template-get-name, pki:template-get-request, pki:template-get-version, pki:template-in-use, pki:template-set-description, pki:template-set-key-options, pki:template-set-key-type, pki:template-set-name, pki:template-set-request

plugin-register

http://marklogic.com/xdmp/privileges/plugin-register

privilege to use the plugin API

plugin:register

plugin-server-fields

http://marklogic.com/xdmp/privileges/plugin-server-fields

privilege to use the plugin API

Used by the plugin API

prepare-any-xa-transactions

http://marklogic.com/xdmp/privileges/prepare-any-xa-transactions

privilege to run built-in to prepare XA transactions for any transactions

xdmp:xa-prepare

prepare-my-xa-transactions

http://marklogic.com/xdmp/privileges/prepare-my-xa-transactions

privilege to run built-in to prepare XA transactions for the user’s transactions

xdmp:xa-prepare

privilege-add-roles

http://marklogic.com/xdmp/privileges/privilege-add-roles

privilege to assign the privilege to additional roles

sec:privilege-add-roles

privilege-get-roles

http://marklogic.com/xdmp/privileges/privilege-get-roles

privilege to get all roles associated with a privilege

sec:privilege-get-roles

privilege-remove-roles

http://marklogic.com/xdmp/privileges/privilege-remove-roles

privilege to remove privilege from roles to which it is assigned

sec:privilege-remove-roles

privilege-set-name

http://marklogic.com/xdmp/privileges/privilege-set-name

privilege to set a privilege’s name

sec:privilege-set-name

privilege-set-roles

http://marklogic.com/xdmp/privileges/privilege-set-roles

privilege to set roles associated with a privilege

sec:privilege-set-roles

profile-any-requests

http://marklogic.com/xdmp/privileges/profile-any-requests

privilege to profile requests initiated by any user

prof:enable and other profile APIs

profile-my-requests

http://marklogic.com/xdmp/privileges/profile-my-requests

privilege to profile requests initiated by the user running the request from which profiling is called

prof:enable and other profile APIs

protect-collection

http://marklogic.com/xdmp/privileges/protect-collection

privilege to make a new or existing collection protected

sec:protect-collection

protect-path

http://marklogic.com/xdmp/privileges/protect-path

privilege to protect a path

sec:protect-path

qconsole

http://marklogic.com/xdmp/privileges/qconsole

privilege to run Query Console

redaction-user

http://marklogic.com/xdmp/privileges/redaction-user

privilege to validate and set redaction rules

rdt:rule-validate

rdt:redact

remove-amp

http://marklogic.com/xdmp/privileges/remove-amp

privilege to remove an amp from the security database

sec:remove-amp

remove-credential

http://marklogic.com/xdmp/privileges/remove-credential

privilege to remove credentials

sec:remove-credential

remove-credential-by-id

http://marklogic.com/xdmp/privileges/remove-credential-by-id

privilege to remove credentials

sec:remove-credential-by-id

remove-external-security

http://marklogic.com/xdmp/privileges/remove-external-security

privilege to remove external authentication configuration objects

sec:remove-external-security

remove-path

http://marklogic.com/xdmp/privileges/remove-path

privilege to remove protection from protected paths

sec:remove-path

remove-privilege

http://marklogic.com/xdmp/privileges/remove-privilege

privilege to remove a privilege from the security database

sec:remove-privilege

remove-query-rolesets

http://marklogic.com/xdmp/privileges/remove-query-rolesets

privilege to remove query rolesets from the Security database

sec:remove-query-rolesets

remove-role

http://marklogic.com/xdmp/privileges/remove-role

privilege to remove a role from the security database

sec:remove-role

remove-role-from-amps

http://marklogic.com/xdmp/privileges/remove-role-from-amps

privilege to remove a role from all amps in the security database

sec:remove-role-from-amps

remove-role-from-privileges

http://marklogic.com/xdmp/privileges/remove-role-from-privileges

privilege to remove a role from all privileges in the security database

sec:remove-role-from-privileges

remove-role-from-roles

http://marklogic.com/xdmp/privileges/remove-role-from-roles

privilege to remove a role from all roles in the security database

sec:remove-role-from-roles

remove-role-from-users

http://marklogic.com/xdmp/privileges/remove-role-from-users

privilege to remove a role from all users in the security database

sec:remove-role-from-users

remove-user

http://marklogic.com/xdmp/privileges/remove-user

privilege to remove a user from the security database

sec:remove-user

rest-admin

http://marklogic.com/xdmp/privileges/rest-admin

privilege to perform administrative tasks using the REST API

REST APIs

rest-reader

http://marklogic.com/xdmp/privileges/rest-reader

privilege to perform read operations using the REST API

REST APIs

rest-tracer

http://marklogic.com/xdmp/privileges/rest-tracer

rest-writer

http://marklogic.com/xdmp/privileges/rest-writer

privilege to perform update tasks using the REST API

REST APIs

role-add-roles

http://marklogic.com/xdmp/privileges/role-add-roles

privilege to add roles to the roles of a specified role

sec:role-add-roles

role-exists

http://marklogic.com/xdmp/privileges/get-role

privilege to find out if a role exists

sec:role-exists

role-get-compartment

http://marklogic.com/xdmp/privileges/role-get-compartment

privilege to get a role’s compartment

sec:role-get-compartment

role-get-default-collections

http://marklogic.com/xdmp/privileges/role-get-default-collections

privilege to get a role’s default collections

sec:role-get-default-collections

role-get-default-permissions

http://marklogic.com/xdmp/privileges/role-get-default-permissions

privilege to get a role’s default permissions

sec:role-get-default-permissions

role-get-description

http://marklogic.com/xdmp/privileges/role-get-description

privilege to get a role’s description

sec:role-get-description

role-get-external-names

http://marklogic.com/xdmp/privileges/role-get-external-names

privilege to get a role’s external LDAP group names

sec:role-get-external-names

role-get-roles

http://marklogic.com/xdmp/privileges/role-get-roles

privilege to get all the roles included in the specified role

sec:role-get-roles

role-privileges

http://marklogic.com/xdmp/privileges/role-privileges

privilege to get all the privileges for a given role

sec:role-privileges

role-remove-roles

http://marklogic.com/xdmp/privileges/role-remove-roles

privilege to remove roles from the roles of a specified role

sec:role-remove-roles

role-set-default-collections

http://marklogic.com/xdmp/privileges/role-set-default-collections

privilege to set a role’s default collections

sec:role-set-default-collections

role-set-default-permissions

http://marklogic.com/xdmp/privileges/role-set-default-permissions

privilege to set a role’s default permissions

sec:role-set-default-permissions

role-set-description

http://marklogic.com/xdmp/privileges/role-set-description

privilege to set a role’s name

sec:role-set-description

role-set-external-names

http://marklogic.com/xdmp/privileges/role-set-external-names

privilege to set external LDAP distinguished names for a role

sec:role-set-external-names

role-set-name

http://marklogic.com/xdmp/privileges/role-set-name

privilege to change a role’s name

sec:role-set-name

role-set-roles

http://marklogic.com/xdmp/privileges/role-set-roles

privilege to change all the roles in the specified role

sec:role-set-roles

saml-entity-delete

http://marklogic.com/xdmp/privileges/saml-entity-delete

privilege to delete a SAML entity

sec:saml-entity-delete

saml-entity-insert

http://marklogic.com/xdmp/privileges/saml-entity-insert

privilege to insert a SAML entity into the Security database

sec:saml-entity-insert

sem:sparql

http://marklogic.com/xdmp/privileges/sem-sparql

privilege to run a sparql query

sem:sparql

sem:sparql-update

http://marklogic.com/xdmp/privileges/sem-sparql-update

privilege to run a sparql update

sem:sparql-update

set-any-time-limit

http://marklogic.com/xdmp/privileges/xdmp-set-request-time-limit-any

privilege to change the request time limit

xdmp:set-request-time-limit

set-any-transaction-name

http://marklogic.com/xdmp/privileges/xdmp-set-transaction-name-any

privilege to set a name for any transaction

xdmp:set-transaction-name

set-any-transaction-time-limit

http://marklogic.com/xdmp/privileges/xdmp-set-transaction-time-limit-any

privilege to set a time limit for any transaction

xdmp:set-transaction-time-limit

set-my-time-limit

http://marklogic.com/xdmp/privileges/xdmp-set-request-time-limit-my

privilege to change the request time limit

xdmp:set-request-time-limit

set-my-transaction-name

http://marklogic.com/xdmp/privileges/xdmp-set-transaction-name-my

privilege to set a name for the user’s transactions

xdmp:set-transaction-name

set-my-transaction-time-limit

http://marklogic.com/xdmp/privileges/xdmp-set-transaction-time-limit-my

privilege to set a time limit for the user’s transactions

xdmp:set-transaction-time-limit

status-builtins

http://marklogic.com/xdmp/privileges/status

privilege to access the status built-ins

status built-ins

switch-task-user

http://marklogic.com/xdmp/privileges/switch-task-user

privilege for setting the task-user if it is not the current user

temporal-admin

http://marklogic.com/xdmp/privileges/temporal-admin

privilege to execute temporal admin functions

All temporal admin functions

temporal-internal

http://marklogic.com/xdmp/privileges/temporal-internal

internal temporal privilege

temporal-document-protect

http://marklogic.com/xdmp/privileges/temporal-document-protect

privilege to protect a temporal document from certain temporal operations for a period of time

temporal:document-protect

temporal:document-wipe

http://marklogic.com/xdmp/privileges/temporal-document-wipe

privilege to delete all versions of a temporal document

temporal:document-wipe

temporal:set-lsqt-automation

http://marklogic.com/xdmp/privileges/temporal-set-lsqt-automation

privilege to set Last Stable Query Time (LSQT) management to automatic

temporal:set-lsqt-automation

temporal:set-use-lsqt

http://marklogic.com/xdmp/privileges/temporal-set-use-lsqt

privilege to enable or disable the use of LSQT (Last Stable Query Time) on temporal collections

temporal:set-use-lsqt

temporal:statement-set-system-time

http://marklogic.com/xdmp/privileges/temporal-statement-set-system-time

privilege to set the system start time on temporal documents

temporal:statement-set-system-time

term-query

http://marklogic.com/xdmp/privileges/term-query

cts:term-query

database-create-sub-database

http://marklogic.com/xdmp/privileges/database-create-sub-database

privilege to create sub databases

tieredstorage:database-create-sub-database

database-create-super-database

http://marklogic.com/xdmp/privileges/database-create-super-database

privilege to create super databases

tieredstorage:database-create-super-database

database-delete-sub-database

http://marklogic.com/xdmp/privileges/database-delete-sub-database

privilege to delete sub databases

tieredstorage:database-delete-sub-database

database-delete-super-database

http://marklogic.com/xdmp/privileges/database-delete-super-database

privilege to delete super databases

tieredstorage:database-delete-super-database

database-partition-numbers

http://marklogic.com/xdmp/privileges/database-partition-numbers

privilege to return the partition numbers of the forests in a database

tieredstorage:database-partition-numbers

database-partitions

http://marklogic.com/xdmp/privileges/database-partitions

privilege to return the names of the partitions in a database

tieredstorage:database-partitions

forest-combine

http://marklogic.com/xdmp/privileges/forest-combine

privilege to combine data in multiple forests into one new forest

tieredstorage:forest-combine

forest-migrate

http://marklogic.com/xdmp/privileges/forest-migrate

privilege to move data in a forest to new data directories

tieredstorage:forest-migrate

partition-create

http://marklogic.com/xdmp/privileges/partition-create

privilege to create a query partition

tieredstorage:query-partition-create

partition-delete

http://marklogic.com/xdmp/privileges/partition-delete

privilege to delete a query partition

tieredstorage:partition-delete

partition-delete-query

http://marklogic.com/xdmp/privileges/partition-delete-query

privilege to delete a query from a partition

tieredstorage:partition-delete-query

partition-forests

http://marklogic.com/xdmp/privileges/partition-forests

privilege to returns ids of the forests in a query partition

tieredstorage:partition-forests

partition-get-exclusion-enabled

http://marklogic.com/xdmp/privileges/partition-get-exclusion-enabled

privilege to return the safe-to-exclude setting for a database

tieredstorage:partition-get-exclusion-enabled

partition-get-query

http://marklogic.com/xdmp/privileges/partition-get-query

privilege to return the query of a partition

tieredstorage:partition-get-query

partition-migrate

http://marklogic.com/xdmp/privileges/partition-migrate

privilege to migrate forests in a partition to a data directory and hosts

tieredstorage:partition-migrate

partition-number-forests

http://marklogic.com/xdmp/privileges/partition-number-forests

privilege to return the IDs of the forests associated with a partition

tieredstorage:partition-number-forests

partition-queries

http://marklogic.com/xdmp/privileges/partition-queries

privilege to return the queries in a schema database

tieredstorage:partition-queries

partition-resize

http://marklogic.com/xdmp/privileges/partition-resize

privilege to create or combine forests in a partition

tieredstorage:partition-resize

partition-set-availability

http://marklogic.com/xdmp/privileges/partition-set-availability

privilege to set the availability of the partition

tieredstorage:partition-set-availability

partition-set-exclusion-enabled

http://marklogic.com/xdmp/privileges/partition-set-exclusion-enabled

privilege to exclude a query partition from being searched if the search query does not match the query assignment policy set for the partition

tieredstorage:partition-set-exclusion-enabled

partition-set-query

http://marklogic.com/xdmp/privileges/partition-set-query

privilege to set the query for a partition

tieredstorage:partition-set-query

partition-set-updates-allowed

http://marklogic.com/xdmp/privileges/partition-set-updates-allowed

privilege to set update-allowed state for the forests in a partition

tieredstorage:partition-set-updates-allowed

partition-transfer

http://marklogic.com/xdmp/privileges/partition-transfer

privilege to transfer a partition from one database to another

tieredstorage:partition-transfer

unprotect-collection

http://marklogic.com/xdmp/privileges/unprotect-collection

privilege to change roles for a collection

xdmp:document-add-collections, xdmp:document-remove-collections, xdmp:document-set-collections

unprotect-path

http://marklogic.com/xdmp/privileges/unprotect-path

privilege to remove a protection from a protected path

sec:unprotect-path

unprotected-collections

http://marklogic.com/xdmp/privileges/unprotected-collections

privilege to add to or remove from collections that are unprotected

xdmp:document-add-collections, xdmp:document-remove-collections, xdmp:document-set-collections

unprotected-uri

http://marklogic.com/xdmp/privileges/unprotected-uri

privilege to create document with uri’s that are unprotected

xdmp:document-insert, xdmp:load

user-add-roles

http://marklogic.com/xdmp/privileges/user-add-roles

privilege to add roles to a user

sec:user-add-roles

user-exists

http://marklogic.com/xdmp/privileges/get-user

privilege to check if a user exists in the security database

sec:user-exists

user-get-default-collections

http://marklogic.com/xdmp/privileges/user-gt-default-collections

privilege to get a user’s default collections

sec:user-get-default-collections

user-get-default-permissions

http://marklogic.com/xdmp/privileges/user-get-default-permissions

privilege to get user’s default permissions

sec:user-get-default-permissions

user-get-description

http://marklogic.com/xdmp/privileges/user-get-description

privilege to get user’s description

sec:user-get-description (if not logged in as user)

user-get-external-names

http://marklogic.com/xdmp/privileges/user-get-external-names

privilege to get the external LDAP group names assigned to a user

sec:user-get-external-names

user-get-password-extra

http://marklogic.com/xdmp/privileges/user-get-password-extra

privilege to get the password-extra element from the user document

sec:user-get-password-extra

user-get-roles

http://marklogic.com/xdmp/privileges/user-get-roles

privilege to get user’s roles

sec:user-get-roles (if not logged in as user)

user-privileges

http://marklogic.com/xdmp/privileges/user-privileges

privilege to get a user’s complete privileges

sec:user-privileges (if not logged in as user)

user-remove-roles

http://marklogic.com/xdmp/privileges/user-remove-roles

privilege to remove roles from a user

sec:user-remove-roles

user-set-default-collections

http://marklogic.com/xdmp/privileges/user-set-default-collections

privilege to set a user’s default collections

sec:user-set-default-collections

user-set-default-permissions

http://marklogic.com/xdmp/privileges/user-set-default-permissions

privilege to set a user’s default permissions

sec:user-set-default-permissions

user-set-description

http://marklogic.com/xdmp/privileges/user-set-description

privilege to set a user’s description

sec:user-set-description (if not logged in as user)

user-set-external-names

http://marklogic.com/xdmp/privileges/user-set-external-names

privilege to set the external names for a user

sec:user-set-external-names

user-set-name

http://marklogic.com/xdmp/privileges/user-set-name

privilege to set a user’s name

sec:user-set-name (if not logged in as user)

user-set-password

http://marklogic.com/xdmp/privileges/user-set-password

privilege to set user’s password

sec:user-set-password (if not logged in as user)

user-set-password-extra

http://marklogic.com/xdmp/privileges/user-set-password-extra

privilege to set the password-extra element in the user document

sec:user-set-password-extra

user-set-roles

http://marklogic.com/xdmp/privileges/user-set-roles

privilege to set a user’s role

sec:user-set-roles

view-create

http://marklogic.com/xdmp/privileges/create-view

privilege to create a view

view:create

view-schema-create

http://marklogic.com/xdmp/privileges/create-schema

privilege to create a relational schema

view:schema-create

xdbc-eval

http://marklogic.com/xdmp/privileges/xdbc-eval

privilege to execute eval statements from xcc or xdbc

xdmp:eval

xdbc-eval-in

http://marklogic.com/xdmp/privileges/xdbc-eval-in

privilege to execute eval-in statements from xcc or xdbc

xdmp:eval-in

xdbc-eval-modules-change

http://marklogic.com/xdmp/privileges/xdbc-eval-modules-change

privilege to execute eval statements that change a modules database from xcc or xdbc

xdmp:eval

xdbc-eval-modules-change-file

http://marklogic.com/xdmp/privileges/xdbc-eval-modules-change-file

privilege to execute eval statements that change a filesystem root from xcc or xdbc

xdmp:eval

xdbc-insert

http://marklogic.com/xdmp/privileges/xdbc-insert-in

privilege to execute insert statements from xcc or xdbc

xcc or xdbc inserts

xdbc-insert-in

http://marklogic.com/xdmp/privileges/xdbc-insert-in

privilege to execute insert statements from xcc or xdbc

xdbc or xcc inserts into another database

xdbc-invoke

http://marklogic.com/xdmp/privileges/xdbc-invoke

privilege to execute invoke statements from xcc or xdbc

xdbc or xcc invokes

xdbc-invoke-in

http://marklogic.com/xdmp/privileges/xdbc-invoke-in

privilege to execute invoke statements from xcc or xdbc

xdbc or xcc invokes into another database

xdbc-invoke-modules-change

http://marklogic.com/xdmp/privileges/xdbc-invoke-modules-change

privilege to execute invoke statements that change a modules database from xcc or xdbc

xdbc or xcc invokes that change the modules database

xdbc-invoke-modules-change-file

http://marklogic.com/xdmp/privileges/xdbc-invoke-modules-change-file

privilege to execute invoke statements that change a filesystem root from xcc or xdbc

xdbc or xcc invokes that change the filesystem root

xdbc-spawn

http://marklogic.com/xdmp/privileges/xdbc-spawn

privilege to execute spawn statements from xcc or xdbc

xdbc or xcc spawns

xdbc-spawn-in

http://marklogic.com/xdmp/privileges/xdbc-spawn-in

privilege to execute spawn statements from xcc or xdbc

xdbc or xcc spawns into another database

xdbc-spawn-modules-change

http://marklogic.com/xdmp/privileges/xdbc-spawn-modules-change

privilege to execute spawn statements that change a modules database from xcc or xdbc

xdbc or xcc spawn that change the modules database

xdbc-spawn-modules-change-file

http://marklogic.com/xdmp/privileges/xdbc-spawn-modules-change-file

privilege to execute spawn statements that change a filesystem root from xcc or xdbc

xdbc or xcc spawn that change the filesystem root

xdmp-add-response-header

http://marklogic.com/xdmp/privileges/xdmp-add-response-header

privilege to use the function that adds a response header to a request functions.

admin built-ins, alert-user

xdmp-address-bindable

http://marklogic.com/xdmp/privileges/xdmp-address-bindable

privilege to perform admin functions.

admin built-ins

xdmp-alert-admin

http://marklogic.com/xdmp/privileges/xdmp-alert-admin

privilege to perform alerting admin functions.

xdmp:alert-admin

xdmp-alert-internal

http://marklogic.com/xdmp/privileges/xdmp-alert-internal

privilege used by the Alerting API functions.

xdmp:alert-internal

xdmp-alert-user

http://marklogic.com/xdmp/privileges/xdmp-alert-user

privilege to perform user-level Alerting functions.

xdmp:alert-user, xdmp:alert-admin

xdmp-amp-roles

http://marklogic.com/xdmp/privileges/xdmp-amp-roles

privilege to get an amp’s roles

xdmp:amp-roles

xdmp-binary-join

http://marklogic.com/xdmp/privileges/xdmp-binary-join

privilege to run the binary-join built-n

xdmp:binary-join

xdmp-compressed-tree-cache-partitions

http://marklogic.com/xdmp/privileges/xdmp-compressed-tree-cache-partitions

privilege to perform admin functions

admin built-ins

xdmp-compressed-tree-cache-size

http://marklogic.com/xdmp/privileges/xdmp-compressed-tree-cache-size

privilege to perform admin functions

admin built-ins

xdmp-data-directory

http://marklogic.com/xdmp/privileges/xdmp-data-directory

privilege to access the data directory

admin built-ins

xdmp-database-backup

http://marklogic.com/xdmp/privileges/xdmp-database-backup

privilege to perform a database backup

admin built-ins

xdmp-database-backup-cancel

http://marklogic.com/xdmp/privileges/xdmp-database-backup-cancel

privilege to cancel a database backup

admin built-ins

xdmp-database-backup-purge

http://marklogic.com/xdmp/privileges/xdmp-database-backup-purge

privilege to get purge a database backup

admin built-ins

xdmp-database-backup-status

http://marklogic.com/xdmp/privileges/xdmp-database-backup-status

privilege to get status for a database backup

admin built-ins

xdmp-database-backup-validate

http://marklogic.com/xdmp/privileges/xdmp-database-backup-validate

privilege to validate a database backup

admin built-ins

xdmp-database-create-sub-database

http://marklogic.com/xdmp/privileges/xdmp-database-create-sub-database

privilege to create a sub database

tieredstorage:database-create-sub-database

xdmp-database-create-super-database

http://marklogic.com/xdmp/privileges/xdmp-database-create-super-database

privilege to create a super database

tieredstorage:database-create-super-database

xdmp-database-delete-sub-database

http://marklogic.com/xdmp/privileges/xdmp-database-delete-sub-database

privilege to delete a sub database

tieredstorage:database-delete-sub-database

xdmp-database-delete-super-database

http://marklogic.com/xdmp/privileges/xdmp-database-delete-super-database

privilege to delete a super database

tieredstorage:database-delete-super-database

xdmp-database-incremental-backup

http://marklogic.com/xdmp/privileges/xdmp-database-incremental-backup

privilege to validate if forests can be incrementally backed up

xdmp:database-incremental-backup

xdmp-database-incremental-backup-validate

http://marklogic.com/xdmp/privileges/xdmp-database-incremental-backup-validate

privilege to start an incremental backup of forests

xdmp:database-incremental-backup-validate

xdmp-database-restore

http://marklogic.com/xdmp/privileges/xdmp-database-restore

privilege to perform a database restore

admin built-ins

xdmp-database-restore-cancel

http://marklogic.com/xdmp/privileges/xdmp-database-backup

privilege to cancel a database restore

admin built-ins

xdmp-database-restore-status

http://marklogic.com/xdmp/privileges/xdmp-database-restore-status

privilege to get status for a database restore

admin built-ins

xdmp-database-restore-validate

http://marklogic.com/xdmp/privileges/xdmp-database-restore-validate

privilege to validate a database restore

admin built-ins

xdmp-default-in-memory-geospatial-region-index-size

http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-geospatial-region-index-size

privilege to perform admin functions.

admin built-ins

xdmp-default-in-memory-limit

http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-limit

privilege to perform admin functions.

admin built-ins

xdmp-default-in-memory-list-size

http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-list-size

privilege to perform admin functions.

admin built-ins

xdmp-default-in-memory-range-index-size

http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-range-index-size

privilege to perform admin functions

admin built-ins

xdmp-default-in-memory-reverse-index-size

http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-reverse-index-size

privilege to perform admin functions

admin built-ins

xdmp-default-in-memory-tree-size

http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-tree-size

privilege to perform admin functions

admin built-ins

xdmp-default-in-memory-triple-index-size

http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-triple-index-size

privilege to perform admin functions.

admin built-ins

xdmp-default-journal-count

http://marklogic.com/xdmp/privileges/xdmp-default-journal-count

privilege to perform admin functions.

admin built-ins

xdmp-default-journal-size

http://marklogic.com/xdmp/privileges/xdmp-default-journal-size

privilege to perform admin functions.

admin built-ins

xdmp-default-preallocate-journals

http://marklogic.com/xdmp/privileges/xdmp-default-preallocate-journals

privilege to perform admin functions.

admin built-ins

xdmp-default-s3-domain

http://marklogic.com/xdmp/privileges/xdmp-default-s3-domain

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file

privilege to perform admin functions

admin built-ins

xdmp-delete-cluster-config-file-assignments

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/assignments.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-ca-bundle

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/ca-bundle.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-calendars

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/calendars.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-clusters

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/clusters.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-countries

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/countries.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-databases

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/databases.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-dtfmt-langauges

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/dtfmt-languages.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-groups

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/groups.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-hosts

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/hosts.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-keystore

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/keystore.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-languages

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/languages.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-mimetypes

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/mimetypes.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-security

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/security.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-server

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/server.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-tokenizer

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/tokenizer.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-cluster-config-file-user-languages

http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/user-languages.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file

privilege to perform admin functions

admin built-ins

xdmp-delete-host-config-file-assignments

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/assignments.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-ca-bundle

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/ca-bundle.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-calendars

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/calendars.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-clusters

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/clusters.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-countries

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/countries.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-databases

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/databases.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-dtfmt-langauges

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/dtfmt-languages.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-groups

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/groups.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-hosts

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/hosts.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-keystore

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/keystore.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-languages

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/languages.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-mimetypes

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/mimetypes.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-security

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/security.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-server

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/server.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-tokenizer

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/tokenizer.xml

privilege to perform admin functions.

admin built-ins

xdmp-delete-host-config-file-user-languages

http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/user-languages.xml

privilege to perform admin functions.

admin built-ins

xdmp-disable-event

http://marklogic.com/xdmp/privileges/xdmp-disable-event

privilege to perform admin functions

admin built-ins

xdmp-document-get

http://marklogic.com/xdmp/privileges/xdmp-document-get

privilege to execute function

xdmp:document-get

xdmp-document-load

http://marklogic.com/xdmp/privileges/xdmp-document-load

privilege to execute function

xdmp:document-load

xdmp-email

http://marklogic.com/xdmp/privileges/xdmp-email

privilege to email

xdmp:email

xdmp-email-address

http://marklogic.com/xdmp/privileges/xdmp-email-address

privilege to perform admin functions

admin built-ins

xdmp-enable-event

http://marklogic.com/xdmp/privileges/xdmp-enable-event

privilege to perform admin functions

admin built-ins

xdmp-eval

http://marklogic.com/xdmp/privileges/xdmp-eval

privilege to perform eval functions

xdmp:eval

xdmp-eval-in

http://marklogic.com/xdmp/privileges/xdmp-eval-in

privilege to perform eval-in functions

xdmp:eval-in

xdmp-eval-modules-change

http://marklogic.com/xdmp/privileges/xdmp-eval-modules-change

privilege to execute eval statements that change a modules database

xdmp:eval statements that change the modules database

xdmp-eval-modules-change-file

http://marklogic.com/xdmp/privileges/xdmp-eval-modules-change-file

privilege to execute eval statements that change a filesystem root

xdmp:eval statements that change the filesystem root

xdmp-eval-transaction

http://marklogic.com/xdmp/privileges/xdmp-eval-transaction

privilege to run eval statements with the transaction option

xdmp:eval statements that start a new transaction

xdmp-expanded-tree-cache-partitions

http://marklogic.com/xdmp/privileges/xdmp-expanded-tree-cache-partitions

privilege to perform admin functions

admin built-ins

xdmp-expanded-tree-cache-size

http://marklogic.com/xdmp/privileges/xdmp-expanded-tree-cache-size

privilege to perform admin functions

admin built-ins

xdmp-external-binary

http://marklogic.com/xdmp/privileges/xdmp-external-binary

privilege to access external binary function

xdmp:external-binary

xdmp-filesystem-directory

http://marklogic.com/xdmp/privileges/xdmp-filesystem-directory

privilege to run the built-in

xdmp:filesystem-directory

xdmp-filesystem-directory-create

http://marklogic.com/xdmp/privileges/xdmp-filesystem-directory-create

privilege to perform admin functions

admin built-ins

xdmp-filesystem-directory-delete

http://marklogic.com/xdmp/privileges/xdmp-filesystem-directory-delete

privilege to perform admin functions.

admin built-ins

xdmp-filesystem-file

http://marklogic.com/xdmp/privileges/xdmp-filesystem-file

privilege to perform admin functions

xdmp:filesystem-file

xdmp-filesystem-file-delete

http://marklogic.com/xdmp/privileges/xdmp-filesystem-file-delete

privilege to perform admin functions.

admin built-ins

xdmp-filesystem-file-exists

http://marklogic.com/xdmp/privileges/xdmp-filesystem-file-exists

privilege to run the built-in

xdmp:filesystem-file-exists

xdmp-filesystem-file-get-time

http://marklogic.com/xdmp/privileges/xdmp-filesystem-file-get-time

privilege to perform admin functions.

xdmp:filesystem-file-get-time

xdmp-filesystem-file-length

http://marklogic.com/xdmp/privileges/xdmp-filesystem-file-length

privilege to run the built-in

xdmp:filesystem-file-length

xdmp-forest-backup

http://marklogic.com/xdmp/privileges/xdmp-forest-backup

privilege to perform admin functions

admin built-ins

xdmp-forest-clear

http://marklogic.com/xdmp/privileges/xdmp-forest-clear

privilege to perform admin functions

admin built-ins

xdmp-forest-combine

http://marklogic.com/xdmp/privileges/xdmp-forest-combine

privilege to perform admin functions

admin built-in

xdmp-forest-copy

http://marklogic.com/xdmp/privileges/xdmp-forest-copy

privilege to perform admin functions

admin built-in

xdmp-forest-delete

http://marklogic.com/xdmp/privileges/xdmp-forest-delete

privilege to perform admin functions

admin built-ins

xdmp-forest-directory-delete

http://marklogic.com/xdmp/privileges/xdmp-forest-directory-delete

privilege to perform admin functions

admin built-in

xdmp-forest-directory-exists

http://marklogic.com/xdmp/privileges/xdmp-forest-directory-exists

privilege to perform admin functions

admin built-in

xdmp-forest-get-readonly

http://marklogic.com/xdmp/privileges/xdmp-forest-get-readonly

privilege to perform admin functions

admin built-in

xdmp-forest-rename

http://marklogic.com/xdmp/privileges/xdmp-forest-rename

privilege to perform admin functions

admin built-in

xdmp-forest-restart

http://marklogic.com/xdmp/privileges/xdmp-forest-restart

privilege to perform admin functions

admin built-ins

xdmp-forest-restore

http://marklogic.com/xdmp/privileges/xdmp-forest-restore

privilege to perform admin functions

admin built-ins

xdmp-forest-rollback

http://marklogic.com/xdmp/privileges/xdmp-forest-rollback

privilege to perform admin functions

admin built-ins

xdmp-forest-set-readonly

http://marklogic.com/xdmp/privileges/xdmp-forest-set-readonly

privilege to perform admin functions

admin built-in

xdmp-get

http://marklogic.com/xdmp/privileges/xdmp-get

privilege to get a document into memory

xdmp:get

xdmp-get-forest-keys

http://marklogic.com/xdmp/privileges/xdmp-get-forest-keys

privilege to perform admin functions

admin built-ins

xdmp-get-hot-updates

http://marklogic.com/xdmp/privileges/xdmp-get-hot-updates

privilege to perform admin functions

admin built-ins

xdmp-get-orphaned-binaries

http://marklogic.com/xdmp/privileges/xdmp-get-orphaned-binaries

privilege to run the built-in

xdmp:get-orphaned-binaries

xdmp-get-server-field

http://marklogic.com/xdmp/privileges/xdmp-get-server-field

privilege to get server fields

xdmp:get-server-field

xdmp-get-server-field-names

http://marklogic.com/xdmp/privileges/xdmp-get-server-field-names

privilege to get server fields names

xdmp:get-server-field-names

xdmp-get-session-field

http://marklogic.com/xdmp/privileges/xdmp-get-session-field

privilege to get session fields

xdmp:get-session-field

xdmp-get-session-field-names

http://marklogic.com/xdmp/privileges/xdmp-get-session-field-names

privilege to get session field names

xdmp:get-session-field-names

xdmp-getenv

http://marklogic.com/xdmp/privileges/xdmp-getenv

privilege to perform admin function

admin built-ins

xdmp-host-cores

http://marklogic.com/xdmp/privileges/xdmp-host-cores

privilege to perform admin functions

admin built-ins

xdmp-host-cpus

http://marklogic.com/xdmp/privileges/xdmp-host-cpus

privilege to perform admin functions

admin built-ins

xdmp-host-size

http://marklogic.com/xdmp/privileges/xdmp-host-size

privilege to perform admin functions

admin built-ins

xdmp-hostname

http://marklogic.com/xdmp/privileges/xdmp-hostname

privilege to perform admin functions

admin built-ins

xdmp-http-get

http://marklogic.com/xdmp/privileges/xdmp-http-get

privilege to perform http function

xdmp:http-get

xdmp-http-head

http://marklogic.com/xdmp/privileges/xdmp-http-head

privilege to perform http function

xdmp:http-head

xdmp-http-options

http://marklogic.com/xdmp/privileges/xdmp-http-options

privilege to perform http function

xdmp:http-options

xdmp-http-delete

http://marklogic.com/xdmp/privileges/xdmp-http-delete

privilege to perform http function

xdmp:http-delete

xdmp-http-post

http://marklogic.com/xdmp/privileges/xdmp-http-post

privilege to perform http function

xdmp:http-post

xdmp-http-put

http://marklogic.com/xdmp/privileges/xdmp-http-put

privilege to perform http function

xdmp:http-put

xdmp-install-directory

http://marklogic.com/xdmp/privileges/xdmp-install-directory

privilege to access the installation directory

admin built-ins

xdmp-invoke

http://marklogic.com/xdmp/privileges/xdmp-invoke

privilege to perform invoke functions

xdmp:invoke

xdmp-invoke-in

http://marklogic.com/xdmp/privileges/xdmp-invoke-in

privilege to perform invoke-in functions

xdmp:invoke-in

xdmp-invoke-modules-change

http://marklogic.com/xdmp/privileges/xdmp-invoke-modules-change

privilege to execute invoke statements that change a modules database

xdmp:invoke statements that change the modules database

xdmp-invoke-modules-change-file

http://marklogic.com/xdmp/privileges/xdmp-invoke-modules-change-file

privilege to execute invoke statements that change a filesystem root

xdmp:invoke statements that change the filesystem root

xdmp-invoke-transaction

http://marklogic.com/xdmp/privileges/xdmp-invoke-transaction

privilege to execute invoke statements that have the <transaction-id> option

xdmp:invoke

xdmp-license-accepted

http://marklogic.com/xdmp/privileges/xdmp-license-accepted

privilege to perform admin functions

admin built-ins

xdmp-license-fee

http://marklogic.com/xdmp/privileges/xdmp-license-fee

privilege to perform admin functions

admin built-ins

xdmp-license-key

http://marklogic.com/xdmp/privileges/xdmp-license-key

privilege to perform admin functions

admin built-ins

xdmp-license-key-agreement

http://marklogic.com/xdmp/privileges/xdmp-license-key-agreement

privilege to perform admin functions

admin built-ins

xdmp-license-key-cores

http://marklogic.com/xdmp/privileges/xdmp-license-key-cores

privilege to perform admin functions

admin built-ins

xdmp-license-key-cpus

http://marklogic.com/xdmp/privileges/xdmp-license-key-cpus

privilege to perform admin functions

admin built-ins

xdmp-license-key-decode

http://marklogic.com/xdmp/privileges/xdmp-license-key-decode

privilege to perform admin functions

admin built-ins

xdmp-license-key-encode

http://marklogic.com/xdmp/privileges/xdmp-license-key-encode

privilege to perform admin functions

admin built-ins

xdmp-license-key-expires

http://marklogic.com/xdmp/privileges/xdmp-license-key-expires

privilege to perform admin functions

admin built-ins

xdmp-license-key-options

http://marklogic.com/xdmp/privileges/xdmp-license-key-options

privilege to perform admin functions

admin built-ins

xdmp-license-key-size

http://marklogic.com/xdmp/privileges/xdmp-license-key-size

privilege to perform admin functions

admin built-ins

xdmp-license-key-valid

http://marklogic.com/xdmp/privileges/xdmp-license-key-valid

privilege to perform admin functions

admin built-ins

xdmp-licensee

http://marklogic.com/xdmp/privileges/xdmp-licensee

privilege to perform admin functions

admin built-ins

xdmp-list-cache-partitions

http://marklogic.com/xdmp/privileges/xdmp-list-cache-partitions

privilege to perform admin functions

admin built-ins

xdmp-list-cache-size

http://marklogic.com/xdmp/privileges/xdmp-list-cache-size

privilege to perform admin functions

admin built-ins

xdmp-load

http://marklogic.com/xdmp/privileges/xdmp-load

privilege needed to load a document from the file system

xdmp:load

xdmp-login

http://marklogic.com/xdmp/privileges/xdmp-login

privilege to log in a user without the corresponding password

xdmp-login

xdmp-merge

http://marklogic.com/xdmp/privileges/xdmp-merge

privilege to start merging the forests

xdmp-merge

xdmp-merging

http://marklogic.com/xdmp/privileges/xdmp-merging

privilege to get forest ids of forests currently merging

xdmp:merging

xdmp-missing-directories

http://marklogic.com/xdmp/privileges/xdmp-missing-directories

privilege to perform admin functions

admin built-ins

xdmp-plan

http://marklogic.com/xdmp/privileges/xdmp-plan

privilege to perform admin functions

admin built-ins

xdmp-pre-release-expires

http://marklogic.com/xdmp/privileges/xdmp-pre-release-expires

privilege to perform admin functions

admin built-ins

xdmp-privilege-roles

http://marklogic.com/xdmp/privileges/xdmp-privilege-roles

privilege needed to get a role’s privileges

xdmp:privilege-roles

xdmp-read-cluster-config-file

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-assignments

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/assignments.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-assignments-schema

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/assignments.xsd

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-ca-bundle

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/ca-bundle.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-calendars

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/calendars.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-clusters

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/clusters.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-clusters-schema

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/clusters.xsd

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-countries

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/countries.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-database-schema

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/database.xsd

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-databases

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/databases.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-dtfmt-langauges

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/dtfmt-languages.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-group-schema

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/group.xsd

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-groups

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/groups.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-host-schema

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/hosts.xsd

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-hosts

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/hosts.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-keystore

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/keystore.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-keystore-schema

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/keystore.xsd

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-languages

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/languages.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-mimetypes

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/mimetypes.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-mimetypes-schema

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/mimetypes.xsd

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-security

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/security.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-server

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/server.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-tokenizer

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/tokenizer.xml

privilege to perform admin functions

admin built-ins

xdmp-read-cluster-config-file-user-languages

http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/user-languages.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-assignments

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/assignments.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-ca-bundle

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/ca-bundle.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-calendars

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/calendars.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-clusters

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/clusters.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-countries

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/countries.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-databases

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/databases.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-dtfmt-langauges

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/dtfmt-languages.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-groups

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/groups.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-hosts

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/hosts.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-keystore

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/keystore.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-languages

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/languages.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-mimetypes

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/mimetypes.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-security

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/security.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-server

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/server.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-tokenizer

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/tokenizer.xml

privilege to perform admin functions

admin built-ins

xdmp-read-host-config-file-user-languages

http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/user-languages.xml

privilege to perform admin functions

admin built-ins

xdmp-remove-orphaned-binary

http://marklogic.com/xdmp/privileges/xdmp-remove-orphaned-binary

privilege to run the built-in

xdmp:remove-orphaned-binary

xdmp-restart

http://marklogic.com/xdmp/privileges/xdmp-restart

privilege to perform admin functions

admin built-ins

xdmp-role-roles

http://marklogic.com/xdmp/privileges/xdmp-role-roles

privilege to get a role’s roles

xdmp:role-roles

xdmp-rotate-log-files

http://marklogic.com/xdmp/privileges/xdmp-rotate-log-files

privilege to perform admin functions

admin built-ins

xdmp-save

http://marklogic.com/xdmp/privileges/xdmp-save

privilege needed to save a document to the file system

xdmp:save

xdmp-server-backup

http://marklogic.com/xdmp/privileges/xdmp-server-backup

privilege to perform admin functions

admin built-ins

xdmp-server-import-qualities

http://marklogic.com/xdmp/privileges/xdmp-server-import-qualities

privilege to perform admin functions

admin built-ins

xdmp-server-restore

http://marklogic.com/xdmp/privileges/xdmp-server-restore

privilege to perform admin functions

admin built-ins

xdmp-set-current-transaction

http://marklogic.com/xdmp/privileges/set-current-transaction

privilege to perform the multi-statement transaction function

xdmp:set-current-transaction

xdmp-set-hot-updates

http://marklogic.com/xdmp/privileges/xdmp-set-hot-updates

privilege to perform admin functions

admin built-ins

xdmp-set-request-time-limit

http://marklogic.com/xdmp/privileges/xdmp-set-request-time-limit

privilege to set time limits for a request

xdmp:set-request-time-limit

xdmp-set-server-field

http://marklogic.com/xdmp/privileges/xdmp-set-server-field

privilege to set a server fields

xdmp:set-server-field

xdmp-set-server-field-privilege

http://marklogic.com/xdmp/privileges/xdmp-set-server-field-privilege

privilege to set a specific privilege on a server field

xdmp:set-server-field-privilege

xdmp-set-session-field

http://marklogic.com/xdmp/privileges/xdmp-set-session-field

privilege to run the built-in

xdmp:set-session-field

xdmp-shutdown

http://marklogic.com/xdmp/privileges/xdmp-shutdown

privilege to perform admin functions

admin built-ins

xdmp-sleep

http://marklogic.com/xdmp/privileges/xdmp-sleep

privilege to perform admin functions

admin built-ins

xdmp-smtp-relay

http://marklogic.com/xdmp/privileges/xdmp-smtp-relay

privilege to perform admin functions

admin built-ins

xdmp-spawn

http://marklogic.com/xdmp/privileges/xdmp-spawn

privilege to perform spawn functions

xdmp:spawn

xdmp-spawn-in

http://marklogic.com/xdmp/privileges/xdmp-spawn-in

privilege to perform spawn-in functions

xdmp:spawn-in

xdmp-spawn-modules-change

http://marklogic.com/xdmp/privileges/xdmp-spawn-modules-change

privilege to execute spawn statements that change a modules database

xdmp:spawn statements that change the modules database

xdmp-spawn-modules-change-file

http://marklogic.com/xdmp/privileges/xdmp-spawn-modules-change-file

privilege to execute spawn statements that change a filesystem root

xdmp:spawn statements that change the filesystem root

xdmp-spawn-transaction

http://marklogic.com/xdmp/privileges/xdmp-spawn-transaction

privilege to execute spawn statements that have the <transaction-id> option

xsmp:spawn

xdmp-sql

http://marklogic.com/xdmp/privileges/xdmp-sql

privilege to perform SQL queries

xdmp:sql

xdmp-timestamp

http://marklogic.com/xdmp/privileges/xdmp-timestamp

privilege to perform point-in-time queries

xdmp:eval, xdmp:invoke (timestamp option)

xdmp-transaction-create

http://marklogic.com/xdmp/privileges/xdmp-transaction-create

privilege to run the built-in

xdmp:transaction-create

xdmp-transaction-create-xid

http://marklogic.com/xdmp/privileges/xdmp-transaction-create-xid

privilege to run the built-in

xdmp:transaction-create-xid

xdmp-triple-cache-partitions

http://marklogic.com/xdmp/privileges/xdmp-triple-cache-partitions

privilege to run the built-in

admin built-ins

xdmp-triple-cache-size

http://marklogic.com/xdmp/privileges/xdmp-triple-cache-size

privilege to run the built-in

admin built-ins

xdmp-triple-value-cache-partitions

http://marklogic.com/xdmp/privileges/xdmp-triple-value-cache-partitions

privilege to run the built-in

admin built-ins

xdmp-triple-value-cache-size

http://marklogic.com/xdmp/privileges/xdmp-triple-value-cache-size

privilege to run the built-in

admin built-ins

xdmp-user-last-login

http://marklogic.com/xdmp/privileges/xdmp-user-last-login

privilege to get run the built-in

xdmp:user-last-login

xdmp-user-roles

http://marklogic.com/xdmp/privileges/xdmp-user-roles

privilege to get a user’s roles

xdmp:user-roles

xdmp-username

http://marklogic.com/xdmp/privileges/xdmp-username

privilege to perform admin functions

admin built-ins

xdmp-value

http://marklogic.com/xdmp/privileges/xdmp-value

privilege to use the “evaluate an expression” function

xdmp:value

xdmp-with-namespace

http://marklogic.com/xdmp/privileges/xdmp-with-namespace

privilege to use the “evaluate an expression preserving the namespace” function

xdmp:with-namespace

xdmp-write-cluster-config-file

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-assignments

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/assignments.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-ca-bundle

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/ca-bundle.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-calendars

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/calendars.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-clusters

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/clusters.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-countries

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/countries.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-databases

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/databases.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-dtfmt-langauges

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/dtfmt-languages.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-groups

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/groups.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-hosts

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/hosts.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-keystore

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/keystore.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-languages

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/languages.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-mimetypes

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/mimetypes.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-security

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/security.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-server

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/server.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-tokenizer

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/tokenizer.xml

privilege to perform admin functions

admin built-ins

xdmp-write-cluster-config-file-user-languages

http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/user-languages.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-assignments

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/assignments.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-ca-bundle

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/ca-bundle.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-calendars

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/calendars.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-clusters

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/clusters.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-countries

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/countries.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-databases

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/databases.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-dtfmt-langauges

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/dtfmt-languages.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-groups

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/groups.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-hosts

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/hosts.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-keystore

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/keystore.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-languages

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/languages.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-mimetypes

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/mimetypes.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-security

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/security.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-server

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/server.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-tokenizer

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/tokenizer.xml

privilege to perform admin functions

admin built-ins

xdmp-write-host-config-file-user-languages

http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/user-languages.xml

privilege to perform admin functions

admin built-ins

xdmp-xslt-eval

http://marklogic.com/xdmp/privileges/xslt-eval

privilege to use xdmp:xslt-eval

xdmp:xslt-eval

xdmp-xslt-eval-in

http://marklogic.com/xdmp/privileges/xslt-eval-in

privilege to use xdmp:xslt-eval-in

xdmp:xslt-eval-in

xdmp-xslt-eval-modules-change

http://marklogic.com/xdmp/privileges/xslt-eval-modules-change

privilege to change the modules database for xdmp:xslt-eval

xdmp:xslt-eval

xdmp-xslt-eval-modules-change-file

http://marklogic.com/xdmp/privileges/xslt-eval-modules-change-file

privilege to change the filesystem root for xdmp:xslt-eval

<xdmp:xslt-eval

xdmp-xslt-eval-transaction

http://marklogic.com/xdmp/privileges/xslt-eval-transaction

privilege to execute xdmp:xslt-eval statements that have the <transaction-id> option

xdmp:xslt-eval

xdmp-xslt-invoke

http://marklogic.com/xdmp/privileges/xslt-invoke

privilege to use xdmp:xslt-invoke

xdmp:xslt-invoke

xdmp-xslt-invoke-in

http://marklogic.com/xdmp/privileges/xslt-invoke-in

privilege to use xdmp:xslt-invoke-in

xdmp:xslt-invoke-in

xdmp-xslt-invoke-modules-change

http://marklogic.com/xdmp/privileges/xslt-invoke-modules-change

privilege to use xdmp:xslt-invoke and change the modules database

xdmp:xslt-invoke

xdmp-xslt-invoke-modules-change-file

http://marklogic.com/xdmp/privileges/xslt-invoke-modules-change-file

privilege to use xdmp:xslt-invoke and change the App Server root

xdmp:xslt-invoke

xdmp-xslt-invoke-transaction

http://marklogic.com/xdmp/privileges/xslt-invoke-transaction

privilege to execute xdmp:xslt-invoke statements that have the <transaction-id> option

xdmp:xslt-invoke