> ## Documentation Index
> Fetch the complete documentation index at: https://docs.falkordb.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> FalkorDB is a graph database that speaks the Redis protocol. Queries are issued as OpenCypher through the GRAPH.QUERY and GRAPH.RO_QUERY commands, not over Bolt or a SQL connection.
> FalkorDB implements a subset of OpenCypher with proprietary extensions. Do not assume Neo4j-only syntax or procedures are available — check /cypher/cypher-support and /cypher/known-limitations before using a clause.
> FalkorDB is the successor to RedisGraph, but they are separate products. Do not present RedisGraph commands, versions, or limitations as current FalkorDB behavior.
> Use the official clients listed in /getting-started/clients rather than generic Redis or Neo4j drivers, and prefer the language the user is already working in.
> Configuration parameters are set with GRAPH.CONFIG SET or at startup; cite the exact parameter name from /getting-started/configuration rather than inventing one.
> This site covers four products: FalkorDB (core), FalkorDB Cloud, FalkorDB Enterprise, and the GraphRAG SDK. Name which one an answer applies to, since setup and operations differ.

# List database users

> List the database users configured on a deployment instance.

Returns every database user on the instance with its ACL.

<Note>
  This endpoint uses the FalkorDB API host and bearer token authentication. See [Database users overview](/cloud/api-reference/database-users/overview).
</Note>

## Authorization

<ParamField header="Authorization" type="string" required>
  `Bearer <jwt>`, using the token issued by [Sign in](/cloud/api-reference/authentication/signin).
</ParamField>

## Path parameters

<ParamField path="instanceId" type="string" required>
  ID of the deployment instance.
</ParamField>

## Query parameters

<ParamField query="subscriptionId" type="string" required>
  Subscription that owns the instance.
</ParamField>

## Response

<ResponseField name="users" type="object[]">
  The database users.

  <Expandable title="properties">
    <ResponseField name="username" type="string">
      Username used to authenticate against the database.
    </ResponseField>

    <ResponseField name="acl" type="string">
      ACL string granting key patterns and commands.
    </ResponseField>
  </Expandable>
</ResponseField>

```json 200 OK theme={null}
{
  "users": [
    { "username": "falkordb", "acl": "~* +GRAPH.QUERY +GRAPH.RO_QUERY +INFO +PING" },
    { "username": "analytics", "acl": "~* +GRAPH.RO_QUERY +GRAPH.EXPLAIN +INFO +PING" }
  ]
}
```

## Errors

Returns `401 Unauthorized` when the bearer token is missing or expired.