Skip to main content

Securing MarkLogic Server

Security Administration

MarkLogic Server administrators are privileged users who have the authority to perform tasks such as creating, deleting, and modifying users, roles, and privileges. These tasks change or add data in the security database. Users who perform these tasks must have the security role, either explicitly or by inheriting it from another role (for example, from the admin role). Typically, users who perform these tasks have the admin role, which provides the authority to perform any tasks in the database. Use caution when assigning users to the security and/or admin roles; users who are assigned the admin role can perform any task on the system, including deleting data.

MarkLogic Server provides the following ways to administer security:

  • Admin Interface

  • REST Management API

  • XQuery and JavaScript server-side security administration functions

For details on administering security, see Administering Security.