How do I install the User Role skill?

Run npx skillmds add zilliztech/user-role in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is User Role safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with User Role?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is User Role free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published User Role?

zilliztech (@zilliztech) published this skill. Their other Agent Skills are listed on their SkillMD profile.

User Role by zilliztech — Agent Skill

Name: User Role
Rating: 4.2 (5 reviews)
Author: zilliztech

File contents

Prerequisites

CLI installed, logged in, and cluster context set (see setup skill).

Commands Reference

Users

Create a User

zilliz user create --user <username> --password <password>

Create a new database user.

List Users

zilliz user list

List all database users.

Describe a User

zilliz user describe --user <username>

Get details of a user.

Drop a User

zilliz user drop --user <username-to-drop>

Drop a database user.

Update Password

zilliz user update-password \
  --user <username> \
  --password <current-password> \
  --new-password <new-password>

Update user password.

Grant a Role to a User

zilliz user grant-role --user <username> --role <role-name-to-grant>

Grant a role to a user.

Revoke a Role from a User

zilliz user revoke-role --user <username> --role <role-name-to-revoke>

Revoke a role from a user.

Roles

Create a Role

zilliz role create --role <role-name>

Create a new role.

List Roles

zilliz role list

List all roles.

Describe a Role

zilliz role describe --role <role-name>

Get details and privileges of a role.

Drop a Role

zilliz role drop --role <role-name-to-drop>

Drop a role.

Grant a Privilege

zilliz role grant-privilege \
  --role <role-name> \
  --object-type <Global|Collection|Database> \
  --object-name <object-name> \
  --privilege <privilege-name>
# Optional: --database <database-name>

Grant a privilege to a role.

Revoke a Privilege

zilliz role revoke-privilege \
  --role <role-name> \
  --object-type <Global|Collection|Database> \
  --object-name <object-name> \
  --privilege <privilege-name>
# Optional: --database <database-name>

Revoke a privilege from a role.

Common Privileges

Common privileges by object type:

Collection: Search, Query, Insert, Delete, CreateIndex, DropCollection
Global: CreateCollection, All
Database: ListCollections

Guidance

User and role management is only available on Dedicated clusters.
Built-in roles: admin (full access), public (no privileges by default -- must be granted explicitly).
When setting up RBAC, suggest a workflow: create role, grant privileges, create user, assign role.
Before dropping a user or role, confirm with the user.
Use * as object-name to grant privilege on all objects of that type.
These commands are Milvus database RBAC, scoped to one cluster. They do not control who can create, modify, or delete cloud resources -- that is cloud-level RBAC over organizations and projects, managed with zilliz acl (see the acl skill). Granting a Milvus role never grants cloud permissions, and vice versa.

---name: user-roledescription: Use when the user wants to manage database users, roles, passwords, or access privileges in Milvus.---## Prerequisites1. CLI installed, logged in, and cluster context set (see setup skill).## Commands Reference### Users#### Create a User```bashzilliz user create --user <username> --password <password>```*Create a new database user.*#### List Users```bashzilliz user list```*List all database users.*#### Describe a User```bashzilliz user describe --user <username>```*Get details of a user.*#### Drop a User```bashzilliz user drop --user <username-to-drop>```*Drop a database user.*#### Update Password```bashzilliz user update-password \ --user <username> \ --password <current-password> \ --new-password <new-password>```*Update user password.*#### Grant a Role to a User```bashzilliz user grant-role --user <username> --role <role-name-to-grant>```*Grant a role to a user.*#### Revoke a Role from a User```bashzilliz user revoke-role --user <username> --role <role-name-to-revoke>```*Revoke a role from a user.*### Roles#### Create a Role```bashzilliz role create --role <role-name>```*Create a new role.*#### List Roles```bashzilliz role list```*List all roles.*#### Describe a Role```bashzilliz role describe --role <role-name>```*Get details and privileges of a role.*#### Drop a Role```bashzilliz role drop --role <role-name-to-drop>```*Drop a role.*#### Grant a Privilege```bashzilliz role grant-privilege \ --role <role-name> \ --object-type <Global|Collection|Database> \ --object-name <object-name> \ --privilege <privilege-name># Optional: --database <database-name>```*Grant a privilege to a role.*#### Revoke a Privilege```bashzilliz role revoke-privilege \ --role <role-name> \ --object-type <Global|Collection|Database> \ --object-name <object-name> \ --privilege <privilege-name># Optional: --database <database-name>```*Revoke a privilege from a role.*## Common PrivilegesCommon privileges by object type:- **Collection**: `Search`, `Query`, `Insert`, `Delete`, `CreateIndex`, `DropCollection`- **Global**: `CreateCollection`, `All`- **Database**: `ListCollections`## Guidance- User and role management is only available on **Dedicated** clusters.- Built-in roles: `admin` (full access), `public` (no privileges by default -- must be granted explicitly).- When setting up RBAC, suggest a workflow: create role, grant privileges, create user, assign role.- Before dropping a user or role, confirm with the user.- Use `*` as object-name to grant privilege on all objects of that type.- These commands are **Milvus database RBAC**, scoped to one cluster. They do not control who can create, modify, or delete cloud resources -- that is cloud-level RBAC over organizations and projects, managed with `zilliz acl` (see the acl skill). Granting a Milvus role never grants cloud permissions, and vice versa.

Frequently asked questions