Stardog Academy Training FAQ:
Security

Roles allow you to manage permissions of potentially large sections of Users in one place and easily change an individual User’s permissions if their role in the organization changes.

Effective User Permissions are the Permissions that a given User has both explicitly assigned and granted via membership in Roles.

Unfortunately, Superuser is a flag that can only be set at User creation time.

Stardog will not let you disable or delete a Superuser if there would be no more active/enabled Superusers left in the system. When using LDAP or Kerberos authentication it is theoretically possible, however, those systems would then allow the creation of others.

The most common cause for this is when Named Graph Security is enabled. By default, with Named Graph Security unless a User also has read permissions for at least one named graph in the database, it will appear to them as an empty database.

When delegating authentication to an LDAP server, Stardog no longer manages the list of Users and Roles; it only manages their Permissions. To create a new User, you would need to create it within the LDAP system, at which point Stardog could manage its Permissions.