Users, permissions and multi-tenancy
Lets an agent manage cognee users, tenants, roles and dataset sharing permissions
- Repository
- topoteretes/cognee
- Stars
- 33,002
- Licence
- Apache-2.0
- Files
- 1 file
What it does
Teaches the agent how cognee controls who can see and change stored datasets. Once installed, the agent can create users, organize them into tenants (organizations) and roles, share datasets with read, write, delete or share grants, and act as a specific user in SDK calls or over the HTTP API. It also explains how to debug permission errors and how to switch access control on or off.
Great for
- Developers building multi-user or multi-tenant applications on top of cognee
- Engineers debugging PermissionDeniedError or missing dataset errors
- Teams setting up shared knowledge datasets between users or roles
Skip it if
- Single-user local experiments, where the default setup already works and this access-control detail is unnecessary
- Production multi-tenant deployments that need managed isolation: the skill directs those to contact cognee's team, and turning access control off shares all users' data in one database
Try asking
- “Create two users, have Alice remember notes in her own dataset and share it read-only with Bob”
- “Set up a tenant called Acme with a Researcher role and grant the role read access to a dataset”
- “Why does recall return DatasetNotFoundError when my colleague shared a dataset with me?”
- “Show me how to log in over HTTP and call the permissions endpoints with an API key”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.
cognee-permissions.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip cognee-permissions.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip cognee-permissions.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Always address shared datasets by id rather than name, since names only resolve among the caller's own datasets
- Create a dataset with the target tenant active if you want it shared inside that tenant, and reload the user after changing the active tenant
- Keep access control on (the default) for any deployment with more than one user, and set a password for the default user before exposing the HTTP server
What's inside
- SKILL.md
Redistributed unmodified from topoteretes/cognee under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.