security
Installation
SKILL.md
Couchbase Security
RBAC Model
User → Roles → Privileges → Resources
Resources can be scoped to cluster, bucket, scope, or collection. Always grant the minimum scope needed — prefer collection-level roles for application users.
Key Roles
Data access
| Role | Internal name | Grants |
|---|---|---|
| Data Reader | data_reader |
KV GET |
| Data Writer | data_writer |
KV SET, DELETE |
| Data DCP Reader | data_dcp_reader |
DCP stream (Eventing, Analytics, XDCR) |