User management with multi tenant setup

[marc_roth]

Hi community,

we're trying to move our application from a graph-based user management over to the integrated role based one from the 4.1 enterprise. At the moment we have all users stored in one instance per tenant and therefore the management is secure for each of them as they only can see their own users.
But we couldn't setup a system with one neo4j instance and multiple databases as granting user management allows to see all other users because of the access to the dbms. We can of course filter them down within the application using a filter to the corresponding roles, but there's still the evil database access what chalks up our system as a vulnerable.
Has anybody else had to do with such a setup already and if so what was the final outcome? Would be great to hear from you.

Kindly,
Marc

[sameerG]

Neo4j Graph Database Platform

Role Based Access Control in Neo4j 4.1 - Neo4j Graph Database Platform

In this video, Adam provides a worked example of the new Role Based Access Control features in Neo4j 4.1 using the Northwind dataset. For more information, head to the blog post:...

[marc_roth]

Hi @sameerG,
thanks for sharing this video. I've already been walking through nearly all features of 4.1 concerning its' access control features. Inside the video I've seen nothing concerning any kind of "tenant-user-admin-roles", or maybe I've skipped the crucial few seconds.
Kindly,
Marc