in master run following command
127.0.0.1:6379>acl setuser user on >pass ~* +@all
127.0.0.1:6379>acl list
1) "user default on nopass ~* +@all"
2) "user user on #d74ff0ee8da3b9806b18c877dbf29bbde50b5bd8e4dad7a3a725000feb82e8f1 ~* +@all"
in slave run acl list
127.0.0.1:6380> acl list
1) "user default on nopass ~* +@all"
the new user user not propagated to slave
Comment From: antirez
Hello, this is by design. We often may want masters and replicas to have a different set of rules. If you want the same rules, you should propagate the same ACL rules to all the instances. Maybe in the future we may add a feature that allows replicas to have a copy of the ACLs from the master, and in that case the replicas will not accept any ACL command that modifies the rules.