Property-based access control (PBAC)

Property-based access control works as on a standard database. For details, see Property-based access control. In 2026.07, PBAC only supports READ privileges.

Privileges are granted on the virtual database. Explicitly granting privileges on a shard is not supported.

The following example shows how to grant permission to READ the address property on Email or Website nodes with domain exampledomain.com to role regularUsers:

GRANT READ { address } ON GRAPH `foo-sharded` FOR (n:Email|Website) WHERE n.domain = 'exampledomain.com' TO regularUsers;