# File realm

You can manage and authenticate users with the built-in file realm. All the data about the users for the file realm is stored in the `users` file. The file is located in `SO_PATH_CONF` and is read on startup.

You need to explicitly select the file realm in the `snowowl.yml` configuration file in order to use it for authentication.

```yml
identity:
  providers:
    - file:
        name: users
```

In the above configuration the file realm is using the `users` file to read your users from. Each row in the file represents a username and password delimited by `:` character. The passwords are BCrypt encrypted hashes. The default `users` file comes with a default `snowowl` user with the default `snowowl` password.

## Users Command

To simplify file realm configuration, the Snow Owl CLI comes with a command to add a user to the file realm (`snowowl users add`). See the command help manual (`-h` option) for further details.

## Authorization

The file security realm does NOT support the Authorization formats at the moment. If you are interested in configuring role-based access control for your users, it is recommended to switch to the [LDAP security realm](/snow-owl/setup-and-administration/advanced-configuration/security/ldap-realm.md).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.b2ihealthcare.com/snow-owl/setup-and-administration/advanced-configuration/security/file-realm.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
