From 6ba1761857b90c25f08428d3885cad2bd552a440 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 29 Jun 2026 10:59:44 +0000
Subject: [PATCH 1/3] Initial plan


From 5c22a44eb5d7007ed8f47586799a963322bdf5b6 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 29 Jun 2026 11:02:04 +0000
Subject: [PATCH 2/3] Add user management guide for FalkorDB Cloud instances

---
 .wordlist.txt            |  1 +
 cloud/user-management.md | 79 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 80 insertions(+)
 create mode 100644 cloud/user-management.md

diff --git a/.wordlist.txt b/.wordlist.txt
index db2c1f3d..6c9f30de 100644
--- a/.wordlist.txt
+++ b/.wordlist.txt
@@ -201,6 +201,7 @@ dotenv
 Dovizioso
 drivine
 dropConstraint
+dropdown
 Dropzone
 DT
 Ducati
diff --git a/cloud/user-management.md b/cloud/user-management.md
new file mode 100644
index 00000000..7ecd4885
--- /dev/null
+++ b/cloud/user-management.md
@@ -0,0 +1,79 @@
+---
+title: "User Management"
+parent: "Cloud DBaaS"
+nav_order: 7
+description: "Guide to managing database users on a FalkorDB Cloud instance. Learn how to create, update, and delete users, assign roles, and apply custom Redis ACL rules."
+---
+
+# User Management
+
+FalkorDB Cloud lets you manage database users directly from the instance page. You can create additional users, assign them predefined roles or custom Redis ACL rules, update their credentials or permissions, and delete users you no longer need.
+
+> **Prerequisite:** The instance must be in a **running** state before you can manage its users.
+
+---
+
+## Opening the User Access Tab
+
+1. Go to [app.falkordb.cloud](https://app.falkordb.cloud) and sign in.
+2. Select your instance from the list.
+3. Click the **User Access** tab on the instance detail page.
+
+The tab shows a table of all users configured on the instance, along with their assigned role or ACL rule.
+
+---
+
+## Default User
+
+Every instance has a **default user** that is created automatically during deployment. This user cannot be created or deleted from the **User Access** tab — its credentials can only be changed by modifying the instance configuration.
+
+---
+
+## Creating a User
+
+1. From the **User Access** tab, click **Add User**.
+2. Fill in the required fields:
+   - **Username** — the login name for the new user.
+   - **Password** — a secure password for the user.
+3. Assign permissions using one of the two options:
+   - **Predefined role** — select one of the built-in roles from the dropdown:
+     - `Admin` — full read/write access and user management.
+     - `Read-Write` — full read/write access to graphs.
+     - `Read-Only` — read-only access to graphs.
+   - **Custom ACL** — enter a Redis ACL rule string directly to define fine-grained access control. See [ACL](/commands/acl) for available rule syntax.
+4. Click **Save** to create the user.
+
+---
+
+## Updating a User
+
+1. From the **User Access** tab, locate the user you want to update in the table.
+2. Click the **Edit** (pencil) icon next to the user.
+3. Modify the **password**, **role**, or **custom ACL** as needed.
+4. Click **Save** to apply the changes.
+
+---
+
+## Deleting a User
+
+1. From the **User Access** tab, locate the user you want to remove.
+2. Click the **Delete** (trash) icon next to the user.
+3. Confirm the deletion in the dialog that appears.
+
+> The **default user** cannot be deleted from this tab. To remove or replace the default credentials, modify the instance directly.
+
+---
+
+{% include faq_accordion.html
+  title="Frequently Asked Questions"
+  q1="Can I delete the default user?"
+  a1="No. The default user is created during deployment and can only be modified by updating the instance configuration — it cannot be created or deleted from the User Access tab."
+  q2="What predefined roles are available?"
+  a2="Three predefined roles are available: **Admin** (full access including user management), **Read-Write** (full graph read/write), and **Read-Only** (graph read access only)."
+  q3="How do I apply fine-grained access control?"
+  a3="Select **Custom ACL** when creating or editing a user and enter a Redis ACL rule string. See the [ACL command reference](/commands/acl) for the full rule syntax."
+  q4="Does the instance need to be running to manage users?"
+  a4="Yes. The instance must be in a **running** state before you can open the User Access tab and make changes."
+  q5="Can I change a user's password after creation?"
+  a5="Yes. Click the **Edit** icon next to the user in the User Access tab, enter a new password, and save."
+%}

From aed36eb1b0fe3709c857ed49e902063b13bb315a Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 29 Jun 2026 12:04:29 +0000
Subject: [PATCH 3/3] Fix: default user cannot be deleted at all, not just from
 the tab

---
 cloud/user-management.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/cloud/user-management.md b/cloud/user-management.md
index 7ecd4885..6a828c51 100644
--- a/cloud/user-management.md
+++ b/cloud/user-management.md
@@ -25,7 +25,7 @@ The tab shows a table of all users configured on the instance, along with their
 
 ## Default User
 
-Every instance has a **default user** that is created automatically during deployment. This user cannot be created or deleted from the **User Access** tab — its credentials can only be changed by modifying the instance configuration.
+Every instance has a **default user** that is created automatically during deployment. This user cannot be deleted — its credentials can only be changed by modifying the instance configuration.
 
 ---
 
@@ -60,14 +60,14 @@ Every instance has a **default user** that is created automatically during deplo
 2. Click the **Delete** (trash) icon next to the user.
 3. Confirm the deletion in the dialog that appears.
 
-> The **default user** cannot be deleted from this tab. To remove or replace the default credentials, modify the instance directly.
+> The **default user** cannot be deleted.
 
 ---
 
 {% include faq_accordion.html
   title="Frequently Asked Questions"
   q1="Can I delete the default user?"
-  a1="No. The default user is created during deployment and can only be modified by updating the instance configuration — it cannot be created or deleted from the User Access tab."
+  a1="No. The default user is created during deployment and cannot be deleted. Its credentials can only be changed by modifying the instance configuration."
   q2="What predefined roles are available?"
   a2="Three predefined roles are available: **Admin** (full access including user management), **Read-Write** (full graph read/write), and **Read-Only** (graph read access only)."
   q3="How do I apply fine-grained access control?"