Authentication

Weaviate Cloud (WCD) uses RBAC (Role-Based Access Control) to manage authentication. Below, you can find guides on how to create, edit, rotate and delete API keys for accessing Weaviate Cloud.

Create an API key

If you don't have an existing API key, you'll need to create one. Follow these steps to find the API keys section and create a new key if necessary:

Steps to create a new API key

To create an API key, follow these steps:

1. Open the Weaviate Cloud console and select your cluster.
2. Navigate to the API Keys section, found in the Cluster details panel.
3. If you need a new API key, click the New key button.
4. In the Create API Key form, provide a descriptive name for your key.
5. Choose the role for this API key. You can either select an existing role like admin or viewer, or create a new role with specific permissions.
6. Click the Create key button.
7. Important: This is the only time your API key will be displayed. Make sure to copy it or download it and store it in a secure location immediately after creation. You will not be able to retrieve the full key again.

Rotate an API key

Rotating an API key allows you to generate a new key while invalidating the old one, enhancing security.

Steps to rotate an API key

To rotate an API key, follow these steps:

1. Open the Weaviate Cloud console.
2. Select your cluster and navigate to the API Keys section.
3. Locate the API key you want to rotate and click the Rotate button next to it.
4. A confirmation dialog will appear, explaining that the old key will be invalidated. Click Rotate key to proceed.
5. Important: This is the only time your API key will be displayed. Make sure to copy it or download it and store it in a secure location immediately after creation. You will not be able to retrieve the full key again.

Edit an API key

Editing an API key allows you to modify its assigned roles. To edit an API key for a cluster:

Steps to rotate an API key

To edit an API key's roles and permissions, follow these steps:

1. Open the Weaviate Cloud console.
2. Select your cluster and navigate to the API Keys section.
3. Locate the API key you want to edit and click the Edit button next to it.
4. In the Edit API key form, you can modify the key's description/name.
5. You can also update the roles associated with this API key. Choose from the existing roles or assign different roles.
6. Click the Save button to apply your changes.

Delete an API key

To delete an API key, follow these steps:

Steps to delete an API key

To delete an API key, follow these steps:

1. Open the Weaviate Cloud console.
2. Select your cluster and navigate to the API Keys section.
3. Locate the API key you want to delete and click the Trash can button next to it.
4. A confirmation dialog will appear. Enter the necessary text (usually the API key name or a confirmation phrase) to confirm the deletion.
5. Click on the Delete key button.

Further resources

• Manage authorization in WCD
• RBAC documentation

Support

For help with Shared Cloud and Dedicated Cloud, contact Weaviate support directly to open a support ticket. To add a support plan, contact Weaviate sales.

If you have any questions or feedback, let us know in the user forum.

Technical questions

If you have questions feel free to post on our Community forum.

Documentation feedback

Leave feedback by opening a GitHub issue.