# User name and password

Some visualization tools (e.g., BI tools) can pass user name and, sometimes, password
to Cube.

## Configuration

By default, <EnvVar>CUBEJS_SQL_USER</EnvVar> and <EnvVar>CUBEJS_SQL_PASSWORD</EnvVar> environment variables are used
to verify the credentials. You can also customize the authentication by using the
[`check_sql_auth` configuration option][ref-config-check-sql-auth].

Also, the <EnvVar>CUBEJS_SQL_SUPER_USER</EnvVar> environment variable or the [`can_switch_sql_user`
configuration option][ref-config-can-switch-sql-user] can be used to ensure that the
user name can be changed after the initial authentication.


[ref-config-check-sql-auth]: /product/configuration/reference/config#check_sql_auth
[ref-config-can-switch-sql-user]: /product/configuration/reference/config#can_switch_sql_user