vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/dws/dev/dws_06_0250.html
Lu, Huayi e6fa411af0 DWS DEV 830.201 version 
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com>
Co-authored-by: Lu, Huayi <luhuayi@huawei.com>
Co-committed-by: Lu, Huayi <luhuayi@huawei.com>
2024-05-16 07:24:04 +00:00

327 lines
79 KiB
HTML
Raw Blame History

<a name="EN-US_TOPIC_0000001188270556"></a><a name="EN-US_TOPIC_0000001188270556"></a>
<h1 class="topictitle1">GRANT</h1>
<div id="body8662426"><div class="section" id="EN-US_TOPIC_0000001188270556__s939ec23e39ac48ada47e17a328d98b10"><h4 class="sectiontitle">Function</h4><p id="EN-US_TOPIC_0000001188270556__aed258f7a324641f29c674fcf36c04bca"><strong id="EN-US_TOPIC_0000001188270556__b972715257473">GRANT</strong> grants permissions to roles and users.</p>
<p id="EN-US_TOPIC_0000001188270556__ad524e779fe2b471b81cac8e61f3cb74a"><strong id="EN-US_TOPIC_0000001188270556__b842352706135918">GRANT</strong> is used in the following scenarios:</p>
<ul id="EN-US_TOPIC_0000001188270556__u9b8537738cb04b09a9e912f4b292f500"><li id="EN-US_TOPIC_0000001188270556__l91d13579fa774bcfaba29313412e4041"><strong id="EN-US_TOPIC_0000001188270556__en-us_topic_0059778755_a57c8420b40664d00b5393fab6b0dd647">Granting system permissions to roles or users</strong><p id="EN-US_TOPIC_0000001188270556__aa9331f78835c4effb59ae7315462f8ea">System permissions are also called user attributes, including <strong id="EN-US_TOPIC_0000001188270556__b1337063416101">SYSADMIN</strong>, <strong id="EN-US_TOPIC_0000001188270556__b1447233641018">CREATEDB</strong>, <strong id="EN-US_TOPIC_0000001188270556__b1749137201014">CREATEROLE</strong>, <strong id="EN-US_TOPIC_0000001188270556__b163261939191014">AUDITADMIN</strong>, and <strong id="EN-US_TOPIC_0000001188270556__b968534018100">LOGIN</strong>.</p>
<p id="EN-US_TOPIC_0000001188270556__ac511275173b146c7a3d5c1117cda40fb">They can be specified only by the <strong id="EN-US_TOPIC_0000001188270556__b84235270614243">CREATE ROLE</strong> or <strong id="EN-US_TOPIC_0000001188270556__b84235270614250">ALTER ROLE</strong> syntax. The <strong id="EN-US_TOPIC_0000001188270556__b14420114731016">SYSADMIN</strong> permission can be granted and revoked using <strong id="EN-US_TOPIC_0000001188270556__b84235270614350">GRANT ALL PRIVILEGE</strong> and <strong id="EN-US_TOPIC_0000001188270556__b84235270614356">REVOKE ALL PRIVILEGE</strong>, respectively. System permissions cannot be inherited by a user from a role, and cannot be granted using <strong id="EN-US_TOPIC_0000001188270556__b84235270614440">PUBLIC</strong>.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l82a1f3901e9240e0974b44d4d20010d0"><strong id="EN-US_TOPIC_0000001188270556__en-us_topic_0085032153_en-us_topic_0059778755_ab18c3ba37a0e4a1b8142192f91cf3d15">Granting database object permissions to roles or users</strong><p id="EN-US_TOPIC_0000001188270556__ab4b0f1ddee8346a1ac310e7e14ec4b62">Grant permissions related to database objects (tables, views, specified columns, databases, functions, and schemas) to specified roles or users.</p>
<p id="EN-US_TOPIC_0000001188270556__aaa4e6962d4db493d9a084f7b4df9bf87"><strong id="EN-US_TOPIC_0000001188270556__b84235270614532">GRANT</strong> grants specified database object permissions to one or more roles. These permissions are appended to those already granted, if any.</p>
<p id="EN-US_TOPIC_0000001188270556__aed8d069529d547369efcdecc28e83125">The key word <strong id="EN-US_TOPIC_0000001188270556__b1928737910242">PUBLIC</strong> indicates that the permissions are to be granted to all roles, including those that might be created later. <strong id="EN-US_TOPIC_0000001188270556__b84235270618507">PUBLIC</strong> can be regarded as an implicitly defined group including all roles. Any particular role will have the sum of permissions granted directly to it using <strong id="EN-US_TOPIC_0000001188270556__b842352706183147">GRANT</strong>, permissions granted to any role it is presently a member of, and permissions granted to <strong id="EN-US_TOPIC_0000001188270556__b84235270614829">PUBLIC</strong>.</p>
<p id="EN-US_TOPIC_0000001188270556__aba108b8d601a4c1fb6f4243bb060a89b">If <strong id="EN-US_TOPIC_0000001188270556__en-us_topic_0085032153_en-us_topic_0058965813_b4428991210242">WITH GRANT OPTION</strong> is specified, the recipient of a permission can in turn grant it to others. This option cannot be granted to <strong id="EN-US_TOPIC_0000001188270556__b16183132691716">PUBLIC</strong>. Only <span id="EN-US_TOPIC_0000001188270556__text665251576">GaussDB(DWS)</span> supports this operation.</p>
<p id="EN-US_TOPIC_0000001188270556__p113955825012"><span id="EN-US_TOPIC_0000001188270556__text1055279124">GaussDB(DWS)</span> grants the permissions for objects of certain types to <strong id="EN-US_TOPIC_0000001188270556__b8531230114010">PUBLIC</strong>. By default, permissions for tables, table columns, sequences, external data sources, external servers, schemas, and tablespace are not granted to <strong id="EN-US_TOPIC_0000001188270556__b12196332194110">PUBLIC</strong>. However, permissions for the following objects are granted to <strong id="EN-US_TOPIC_0000001188270556__b651115554111">PUBLIC</strong>: <strong id="EN-US_TOPIC_0000001188270556__b151399754218">CONNECT</strong> and <strong id="EN-US_TOPIC_0000001188270556__b6642110144217">CREATE TEMP TABLE</strong> permissions for databases, <strong id="EN-US_TOPIC_0000001188270556__b13209930114215">EXECUTE</strong> permission for functions, and <strong id="EN-US_TOPIC_0000001188270556__b169327139437">USAGE</strong> permission for languages and data types (including domains). An object owner can revoke the default permissions granted to <strong id="EN-US_TOPIC_0000001188270556__b10133357573">PUBLIC</strong> and grant permissions to other users as needed. For security purposes, you are advised to create an object and set permissions for it in the same transaction so that other users do not have time windows to use the object. In addition, you can run the <strong id="EN-US_TOPIC_0000001188270556__b71541827184818">ALTER DEFAULT PRIVILEGES</strong> statement to modify the initial default permissions.</p>
</li><li id="EN-US_TOPIC_0000001188270556__la2dd17b855424490a32df1f1235291d7"><strong id="EN-US_TOPIC_0000001188270556__en-us_topic_0059778755_aa8141f52d6e64b9c81fda2cf86a8ac85">Granting a role's or user's permissions to other roles or users</strong><p id="EN-US_TOPIC_0000001188270556__a491f58fdf9724a56b29f11cbd156ae08">Grant a role's or user's permissions to one or more roles or users. In this case, every role or user can be regarded as a set of one or more database permissions.</p>
<p id="EN-US_TOPIC_0000001188270556__abfac7b4c22ac4671b866b61c633faa8f">If <strong id="EN-US_TOPIC_0000001188270556__b842352706141214">WITH ADMIN OPTION</strong> is specified, the member can in turn grant permissions in the role to others, and revoke permissions in the role as well. If a role or user granted with certain permissions is changed or revoked, the permissions inherited from the role or user also change.</p>
<p id="EN-US_TOPIC_0000001188270556__aa7f9eff33e96410b9828534c5949b984">A database administrator can grant permissions to and revoke them from any role or user. Roles having <strong id="EN-US_TOPIC_0000001188270556__b3420536910242">CREATEROLE</strong> permission can grant or revoke membership in any role that is not an administrator.</p>
</li></ul>
</div>
<div class="section" id="EN-US_TOPIC_0000001188270556__s85d40e81abfa437f8b3b3f86bbdd5825"><h4 class="sectiontitle">Precautions</h4><p id="EN-US_TOPIC_0000001188270556__a6aa88a4df6864151b7870c7bd7ec93c2">None</p>
</div>
<div class="section" id="EN-US_TOPIC_0000001188270556__sc45b112b9e67486b99237ecc69cdf8f0"><h4 class="sectiontitle">Syntax</h4><ul id="EN-US_TOPIC_0000001188270556__ud21f5bd6531749f7b32cd2d4e9aa9844"><li id="EN-US_TOPIC_0000001188270556__l7946ef9da384470fbbfa5edc880ba345">Grant the table or view access permission to a specified role or user. Do not perform <strong id="EN-US_TOPIC_0000001188270556__b178255502486">GRANT</strong> on a table partition. Otherwise, an alarm will be generated.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__s336844d244944ae0ad49a9fd8d7bc405"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span>
<span class="normal">5</span>
<span class="normal">6</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">SELECT</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">INSERT</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">UPDATE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">DELETE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">TRUNCATE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">REFERENCES</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">TRIGGER</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ANALYZE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ANALYSE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">VACUUM</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALTER</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">DROP</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span>
<span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">TABLE</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="k">table_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="n">TABLES</span><span class="w"> </span><span class="k">IN</span><span class="w"> </span><span class="k">SCHEMA</span><span class="w"> </span><span class="k">schema_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__lf7a6d023690c4a23a9c9d5e8899e6c41">Grant the column access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__s206390dec1d44829b92c41a9ee853862"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span>
<span class="normal">5</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="err">{{</span><span class="w"> </span><span class="k">SELECT</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">INSERT</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">UPDATE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">REFERENCES</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">(</span><span class="w"> </span><span class="k">column_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span><span class="p">)</span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span>
<span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="p">(</span><span class="w"> </span><span class="k">column_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span><span class="p">)</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">TABLE</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="k">table_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__l1cb52c517d6a4f868ab8d67639e1ea3f">Grant the database access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__sc72f2b28b20642fc8f840ae076475cde"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span>
<span class="normal">5</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">CREATE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">CONNECT</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">TEMPORARY</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">TEMP</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">DATABASE</span><span class="w"> </span><span class="n">database_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__lf6b469878476416faec9dba6e29979ff">Grant the domain access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__s4a211e35579c48409e2b00c9d188d0ec"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">USAGE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">DOMAIN</span><span class="w"> </span><span class="n">domain_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
<div class="note" id="EN-US_TOPIC_0000001188270556__nf675fcf31a5b47cb89a9631e71a3651a"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="EN-US_TOPIC_0000001188270556__acdabcb9d92ae4dfeb0c662c2b2398777">The current version does not support granting the domain access permission.</p>
</div></div>
</li><li id="EN-US_TOPIC_0000001188270556__lfd3fe0c2fbfb4b5996cba844a32b49ad">Grant the external data source access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__sb751485b0ad343c79f51bdc862a5c8c4"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">USAGE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">FOREIGN</span><span class="w"> </span><span class="k">DATA</span><span class="w"> </span><span class="n">WRAPPER</span><span class="w"> </span><span class="n">fdw_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__lee01cdacea30457e8ec9dff9bf6c4521">Grant the external server access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__s6d5ea3ad4d6f404f950bebb9f48d09de"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">USAGE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">FOREIGN</span><span class="w"> </span><span class="n">SERVER</span><span class="w"> </span><span class="k">server_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__ldf1d93622388439d96692c77abcfbf6c">Grant the function access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__se3f60e6f215d4fc1b6289922e3d4a775"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span>
<span class="normal">5</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">EXECUTE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">FUNCTION</span><span class="w"> </span><span class="err">{</span><span class="n">function_name</span><span class="w"> </span><span class="p">(</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="err">{</span><span class="p">[</span><span class="w"> </span><span class="n">argmode</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="n">arg_name</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">arg_type</span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="p">)</span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="n">FUNCTIONS</span><span class="w"> </span><span class="k">IN</span><span class="w"> </span><span class="k">SCHEMA</span><span class="w"> </span><span class="k">schema_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__l78ac723c1bc34102a104766793a3db79">Grant the procedural language access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__s28cd1afc5f2947e2953fd06ed8c46f2e"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">USAGE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">LANGUAGE</span><span class="w"> </span><span class="n">lang_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
<div class="note" id="EN-US_TOPIC_0000001188270556__n2df94f587d0d436c8b737f5d04326dc7"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="EN-US_TOPIC_0000001188270556__p371915336611">The current version does not support granting the procedural language access permission.</p>
</div></div>
</li><li id="EN-US_TOPIC_0000001188270556__l10dfd4812a7d493c983d1ac13303fc1c">Grant the large object access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__s4765e6e0dd5846709acccd908293301e"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">SELECT</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">UPDATE</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">LARGE</span><span class="w"> </span><span class="k">OBJECT</span><span class="w"> </span><span class="n">loid</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
<div class="note" id="EN-US_TOPIC_0000001188270556__na520e84d6a85417399a6d5a81346746e"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="EN-US_TOPIC_0000001188270556__a9c2c046057ef40c5968e63c8fd3fe78c">The current version does not support granting the large object access permission.</p>
</div></div>
</li><li id="EN-US_TOPIC_0000001188270556__li240365012275">Grant the sequence access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen1955832962811"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span>
<span class="normal">5</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">SELECT</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">UPDATE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">USAGE</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="n">SEQUENCE</span><span class="w"> </span><span class="n">sequence_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span>
<span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="n">SEQUENCES</span><span class="w"> </span><span class="k">IN</span><span class="w"> </span><span class="k">SCHEMA</span><span class="w"> </span><span class="k">schema_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__li08619545525">Grant the sub-cluster access permission to a specified role or user. Common users cannot perform <strong id="EN-US_TOPIC_0000001188270556__b11542122310566">GRANT</strong> or <strong id="EN-US_TOPIC_0000001188270556__b14791226165612">REVOKE</strong> operations on node groups.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen7276114045319"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">CREATE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">USAGE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">COMPUTE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="n">NODE</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="n">group_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__l4d9682a879cf42338eb3cf46ae79aac1">Grant the schema access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__se4a249272c7c44af9580e6da5150187e"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">CREATE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">USAGE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALTER</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">DROP</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">SCHEMA</span><span class="w"> </span><span class="k">schema_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
<div class="note" id="EN-US_TOPIC_0000001188270556__nb2c18e84cc1d486995030a42ccd94b74"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="EN-US_TOPIC_0000001188270556__ad502fc03083b436995dcdf3bc7fa237f">When you grant table or view rights to other users, you also need to grant the USAGE permission for the schema that the tables and views belong to. Without this permission, the users granted with the table or view rights can only see the object names, but cannot access them.</p>
</div></div>
</li><li id="EN-US_TOPIC_0000001188270556__lb15086a3e9fb4e7cb349955977a63a40">Grant the type access permission to a specified role or user.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__s1b55e99a953045bfb654f57115809cf2"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">USAGE</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">TYPE</span><span class="w"> </span><span class="n">type_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">GROUP</span><span class="w"> </span><span class="p">]</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="k">PUBLIC</span><span class="w"> </span><span class="err">}</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">GRANT</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
<div class="note" id="EN-US_TOPIC_0000001188270556__n8849df2badd94efeacf3b7657b077765"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="EN-US_TOPIC_0000001188270556__a2ced8c59af2a492fbf68ba485a4ea869">The current version does not support granting the type access permission.</p>
</div></div>
</li><li id="EN-US_TOPIC_0000001188270556__l50daf6823be442b693dd27f05707818f">Grant a role's rights to other users or roles.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__se0a2d19cfab241739e56f68945a1a0e9"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">role_name</span><span class="w"> </span><span class="p">[,</span><span class="w"> </span><span class="p">...]</span>
<span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">ADMIN</span><span class="w"> </span><span class="k">OPTION</span><span class="w"> </span><span class="p">];</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__l35c1d00069ca4315821eb8d8bdea3966">Grant the SYSADMIN permission to a specified role.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__s493c4b463a4444938e796e16c6364192"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="err">{</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">PRIVILEGE</span><span class="w"> </span><span class="err">}</span>
<span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">role_name</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li></ul>
</div>
<div class="section" id="EN-US_TOPIC_0000001188270556__s226158f44a8f4b908e69a283aeb813cd"><a name="EN-US_TOPIC_0000001188270556__s226158f44a8f4b908e69a283aeb813cd"></a><a name="s226158f44a8f4b908e69a283aeb813cd"></a><h4 class="sectiontitle">Parameter Description</h4><p id="EN-US_TOPIC_0000001188270556__a1ae7f977161e4f5897546f87040c40bd"><strong id="EN-US_TOPIC_0000001188270556__b842352706142019">GRANT</strong> grants the following permissions:</p>
<ul id="EN-US_TOPIC_0000001188270556__ufeb2a2dc192a4775bdf3f9bb15a6a191"><li id="EN-US_TOPIC_0000001188270556__l53a817d916954e978f18fc956226f290"><strong id="EN-US_TOPIC_0000001188270556__a20d32cb957ad473297ba7bac9a95488e">SELECT</strong><p id="EN-US_TOPIC_0000001188270556__acb0a13b914184994b45f09734019e9e3">Allows <strong id="EN-US_TOPIC_0000001188270556__b51422585173256">SELECT</strong> from any column, or the specific columns listed, of the specified table, view, or sequence.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l17cbf3b52ec54fd4be624b76ae16a755"><strong id="EN-US_TOPIC_0000001188270556__a839704059bf148c58ba9df59d4ad6b55">INSERT</strong><p id="EN-US_TOPIC_0000001188270556__ac25f3681651d42778f6c4ecb277b7888">Allows <strong id="EN-US_TOPIC_0000001188270556__b11995159173256">INSERT</strong> of a new row into the specified table.</p>
</li><li id="EN-US_TOPIC_0000001188270556__lbe8e00b0f43d4d4cbdfd28480724e733"><strong id="EN-US_TOPIC_0000001188270556__ad16f5a439b4f480eac52f116858cfe7d">UPDATE</strong><p id="EN-US_TOPIC_0000001188270556__a78c35de962e04665a8bf1c37b0a20f90">Allows <strong id="EN-US_TOPIC_0000001188270556__b14681614173256">UPDATE</strong> of any column, or the specific columns listed, of the specified table. <strong id="EN-US_TOPIC_0000001188270556__b32587652173256">SELECT ... FOR UPDATE</strong> and <strong id="EN-US_TOPIC_0000001188270556__b24853419173256">SELECT ... FOR SHARE</strong> also require this permission on at least one column, in addition to the SELECT permission.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l28c928cabe0249d6a95185675e0047af"><strong id="EN-US_TOPIC_0000001188270556__a00d836234ffb496baab536203e06abb5">DELETE</strong><p id="EN-US_TOPIC_0000001188270556__afe67516e707b402e8a2621d9784e4b45">Allows <strong id="EN-US_TOPIC_0000001188270556__b58185026173256">DELETE</strong> of a row from the specified table.</p>
</li><li id="EN-US_TOPIC_0000001188270556__lb1969d52e1814ddb97bbcda345c98af8"><strong id="EN-US_TOPIC_0000001188270556__a69275b78e46c42ea9421cc75ccb3f5dd">TRUNCATE</strong><p id="EN-US_TOPIC_0000001188270556__a5dfa58c5f6354871b95aa4bed490f991">Allows <strong id="EN-US_TOPIC_0000001188270556__b45506737173256">TRUNCATE</strong> on the specified table.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l043f91af463446c0877d627200f2f149"><strong id="EN-US_TOPIC_0000001188270556__a47c3b55c03b84ddb956fd07969d07b71">REFERENCES</strong><p id="EN-US_TOPIC_0000001188270556__a21917cb12b214dc29f37359c8153dd48">To create a foreign key constraint, it is necessary to have this permission on both the referencing and referenced columns.</p>
</li><li id="EN-US_TOPIC_0000001188270556__li1578615498619"><strong id="EN-US_TOPIC_0000001188270556__b1178634912616">TRIGGER</strong><p id="EN-US_TOPIC_0000001188270556__p378624915611">To create a trigger, you must have the TRIGGER permission on the table or view.</p>
</li><li id="EN-US_TOPIC_0000001188270556__li1453105120618"><strong id="EN-US_TOPIC_0000001188270556__b345375113613">ANALYZE | ANALYSE</strong><p id="EN-US_TOPIC_0000001188270556__p144539514615">To perform the ANALYZE | ANALYSE operation on a table to collect statistics data, you must have the ANALYZE | ANALYSE permission on the table.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l46722c9a14c34839a6336c1ee6a180c4"><strong id="EN-US_TOPIC_0000001188270556__a75a3d3cc64cf413b9be614553ea1af06">CREATE</strong><ul id="EN-US_TOPIC_0000001188270556__u34c6326cefc945cb916f26cc6d81225f"><li id="EN-US_TOPIC_0000001188270556__l92e4337ba37f4661ba8b135a4acafd30">For databases, allows new schemas to be created within the database.</li><li id="EN-US_TOPIC_0000001188270556__lf7b4cf030e834ae49eb8439f1a373f9c">For schemas, allows new objects to be created within the schema. To rename an existing object, you must own the object and have this permission for the schema where the object is located.</li><li id="EN-US_TOPIC_0000001188270556__li13275181295619">For sub-clusters, allows tables to be created.</li></ul>
</li><li id="EN-US_TOPIC_0000001188270556__l7c6d40218dd84cbc8b9481cc3a81ec4e"><strong id="EN-US_TOPIC_0000001188270556__a21bf6b32b51443459dc4a9077c76e828">CONNECT</strong><p id="EN-US_TOPIC_0000001188270556__a657c252bb39d45bc96ea6babc2566de5">Allows the user to connect to the specified database.</p>
</li><li id="EN-US_TOPIC_0000001188270556__li1026313476241"><strong id="EN-US_TOPIC_0000001188270556__b1930244422712">TEMPORARY | TEMP</strong><p id="EN-US_TOPIC_0000001188270556__p112941501242">Allows temporary tables to be created when the specified database is used.</p>
</li><li id="EN-US_TOPIC_0000001188270556__lb69fb7aa6d134ab4b9f521b4bdf485f7"><strong id="EN-US_TOPIC_0000001188270556__acc68b23cf5ca4721bb5a376df0733b07">EXECUTE</strong><p id="EN-US_TOPIC_0000001188270556__afa212280024149fb9cfe6d82d50774d0">Allows the use of the specified function and the use of any operators that are implemented on top of the function.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l89f597bfff004e9089806af5f9640b56"><strong id="EN-US_TOPIC_0000001188270556__ae8831b85ab534a6f9b68a2125dbe8e86">USAGE</strong><ul id="EN-US_TOPIC_0000001188270556__ue2eb0ad6870b49579a895f2c755f3d3c"><li id="EN-US_TOPIC_0000001188270556__lb44aee714c424c47a79460781d818c6e">For procedural languages, allows the use of the specified language for the creation of functions in that language.</li><li id="EN-US_TOPIC_0000001188270556__ldd159df8318f4a57a8a8c597ca5c90eb">For schemas, allows access to objects contained in the specified schema. Without this permission, it is still possible to see the object names.</li><li id="EN-US_TOPIC_0000001188270556__lcc12548eb8dc45d09d26d1081cbfa755">For sequences, allows the use of the <strong id="EN-US_TOPIC_0000001188270556__b1553814122160">NEXTVAL</strong> function.</li><li id="EN-US_TOPIC_0000001188270556__li1817154445616">For sub-clusters, allows users who can access objects contained in the specified schema to access tables in a specified sub-cluster.</li></ul>
</li><li id="EN-US_TOPIC_0000001188270556__li18654162223916"><strong id="EN-US_TOPIC_0000001188270556__b15798202741515">COMPUTE</strong><p id="EN-US_TOPIC_0000001188270556__p883485274111">Allows users to perform elastic computing in a computing sub-cluster that they have the compute permission on.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l15a2972118364c1aaa8a9d3cf0f1166b"><strong id="EN-US_TOPIC_0000001188270556__adef4a74e308046d897a4aa96d1937cf5">ALL PRIVILEGES</strong><p id="EN-US_TOPIC_0000001188270556__ae2ff104ad35e4bf2839b38650720d79e">Grants all of the available permissions at once. Only system administrators have permission to run <strong id="EN-US_TOPIC_0000001188270556__b45398292176">GRANT ALL PRIVILEGES</strong>.</p>
</li><li id="EN-US_TOPIC_0000001188270556__li926261383214"><strong id="EN-US_TOPIC_0000001188270556__b182621134321">WITH GRANT OPTION</strong><p id="EN-US_TOPIC_0000001188270556__p326281323210">Specifies whether permission transfer is allowed. If <strong id="EN-US_TOPIC_0000001188270556__b1610264895">WITH GRANT OPTION</strong> is specified, the recipient of a permission can in turn grant it to others. This option cannot be granted to <strong id="EN-US_TOPIC_0000001188270556__b8423527061400">PUBLIC</strong>.</p>
<div class="note" id="EN-US_TOPIC_0000001188270556__note726261318325"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="EN-US_TOPIC_0000001188270556__ul0262213103213"><li id="EN-US_TOPIC_0000001188270556__li32622134321"><strong id="EN-US_TOPIC_0000001188270556__b175732172212">WITH GRANT OPTION</strong> cannot be used with <strong id="EN-US_TOPIC_0000001188270556__b205432142216">NODE GROUP</strong>.</li><li id="EN-US_TOPIC_0000001188270556__li2026211316328">When using <strong id="EN-US_TOPIC_0000001188270556__b954382032192">WITH GRANT OPTION</strong>, ensure that <strong id="EN-US_TOPIC_0000001188270556__b918296462192">enable_grant_option</strong> is set to <strong id="EN-US_TOPIC_0000001188270556__b4225102202192">on</strong>.</li></ul>
</div></div>
</li><li id="EN-US_TOPIC_0000001188270556__li2561174143919"><strong id="EN-US_TOPIC_0000001188270556__b584345143918">WITH ADMIN OPTION</strong><p id="EN-US_TOPIC_0000001188270556__p35541612400">Specifies whether permission transfer is allowed. If <strong id="EN-US_TOPIC_0000001188270556__b2898154817314">WITH ADMIN OPTION</strong> is specified, members of a role can grant membership of the role to others.</p>
</li></ul>
<p id="EN-US_TOPIC_0000001188270556__a62f32e93b0204bcf9f16b8ec7592220a"><strong id="EN-US_TOPIC_0000001188270556__b842352706142129">GRANT</strong> parameters are as follows:</p>
<ul id="EN-US_TOPIC_0000001188270556__uf401db0d454f4f0b88b3df5a175ee72c"><li id="EN-US_TOPIC_0000001188270556__l2741ce320e404f778c45b71695093020"><strong id="EN-US_TOPIC_0000001188270556__ab906efaa12eb4b568e6568f5b43a26ec">role_name</strong><p id="EN-US_TOPIC_0000001188270556__a99df1eabdfca406a97d93efa07777dd0">Specifies an existing user name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l363a75bd71e444de95ccacd70afeb3a6"><strong id="EN-US_TOPIC_0000001188270556__a73bd478126764e409adf9c6d53589d7d">table_name</strong><p id="EN-US_TOPIC_0000001188270556__ac54c96a615ff4345bb14c038113b28fe">Specifies an existing table name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l660887d4f4d84259ba965a1c63eb3290"><strong id="EN-US_TOPIC_0000001188270556__a87eeb781d81740f89b4594ccfcd4aab2">column_name</strong><p id="EN-US_TOPIC_0000001188270556__a915d095aa20b489a958715cdfd3dc6c3">Specifies an existing column name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l76fa2f8b7a3d4c13a739b44f17e05cc7"><strong id="EN-US_TOPIC_0000001188270556__a77f54bb1d5f84a3b8c05302f3f958438">schema_name</strong><p id="EN-US_TOPIC_0000001188270556__a93e2dec5f51c4b0aa377c707d443b7a4">Specifies an existing schema name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l584d3b9c268b4ca89ed0bd071f758579"><strong id="EN-US_TOPIC_0000001188270556__a403f72158c71455fab293a3f2a592521">database_name</strong><p id="EN-US_TOPIC_0000001188270556__a4f3470c7a0984e08aee7566fc27ef9d9">Specifies an existing database name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l4b1ac131fb6f4b9cbd8b93a9599aa116"><strong id="EN-US_TOPIC_0000001188270556__ada24cc9a46044682b01af232ab4ba107">function_name</strong><p id="EN-US_TOPIC_0000001188270556__a7d7f3a2e76144df9bb34c1fceb3b6bea">Specifies an existing function name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l408242e5541d4e749d7a58ad6b99d04b"><strong id="EN-US_TOPIC_0000001188270556__aacd4d90aa8cf4b18b4df6aa021bb640c">sequence_name</strong><p id="EN-US_TOPIC_0000001188270556__a83159c76008e40cf8616b99f1573b5e3">Specifies an existing sequence name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__lb79c9ececbdf4724a59375ecf2017f5d"><strong id="EN-US_TOPIC_0000001188270556__ae25dc9da9c8346509ca9bb5f0ee565df">domain_name</strong><p id="EN-US_TOPIC_0000001188270556__a9d3467f2f9d24c7f9081242c3ab96864">Specifies an existing domain type.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l5aa2950e8d1e43ad84287b4e36fc211a"><strong id="EN-US_TOPIC_0000001188270556__a22769088474a4499b2f678406c4b47fd">fdw_name</strong><p id="EN-US_TOPIC_0000001188270556__a05c7bf0c3f6b43b5ac9e35a91897ebb7">Specifies an existing foreign data wrapper name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l6df9c7e717aa4145bd74780710c951c5"><strong id="EN-US_TOPIC_0000001188270556__a29d55cbf2a264bccbabf84a6d0b032ef">lang_name</strong><p id="EN-US_TOPIC_0000001188270556__a7b12540672c742dfac758c5dc8fc268b">Specifies an existing language name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l77e2cba91262440db11583304d64a48a"><strong id="EN-US_TOPIC_0000001188270556__ab4f0d0c1943a4b9992bc135ba6b6ce2c">type_name</strong><p id="EN-US_TOPIC_0000001188270556__a5b68404474ef445482bcd993e12a860c">Specifies an existing type name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__li19264143212113"><strong id="EN-US_TOPIC_0000001188270556__b2698114421511">group_name</strong><p id="EN-US_TOPIC_0000001188270556__p1583418411329">Specifies an existing sub-cluster name.</p>
</li><li id="EN-US_TOPIC_0000001188270556__la0008daa3d8649aa9593baf56358ef8b"><strong id="EN-US_TOPIC_0000001188270556__a52b6f1a89a674fff8dfcbef14de133bc">argmode</strong><p id="EN-US_TOPIC_0000001188270556__a1a4a23fc9bd246daa0763d6882284c89">Specifies the parameter mode.</p>
<p id="EN-US_TOPIC_0000001188270556__add1f3cec2a2146548012f3cb81fe682b">Value range: a string. It must comply with the naming convention.</p>
</li><li id="EN-US_TOPIC_0000001188270556__ld1ae9c4f9577419a82e4d6a81bf67621"><strong id="EN-US_TOPIC_0000001188270556__ab18de647b451422c80721303b15ad508">arg_name</strong><p id="EN-US_TOPIC_0000001188270556__a3f3a3450ed524717a319ee5be1c1700b">Indicates the parameter name.</p>
<p id="EN-US_TOPIC_0000001188270556__acaa9435c499547bca19b6a9c6ff9d913">Value range: a string. It must comply with the naming convention.</p>
</li><li id="EN-US_TOPIC_0000001188270556__le34af7c866d64200adf7dc9dfb844169"><strong id="EN-US_TOPIC_0000001188270556__a8fbb03c55d8144778abcc804b52deea0">arg_type</strong><p id="EN-US_TOPIC_0000001188270556__a3d6c4c2947df40c19c584ddee2596c8f">Specifies the parameter type.</p>
<p id="EN-US_TOPIC_0000001188270556__a94854f70a9c0481d954a907ff4d9ebbf">Value range: a string. It must comply with the naming convention.</p>
</li><li id="EN-US_TOPIC_0000001188270556__l0c1f1f02b58c4d2fb978f9787c43c63e"><strong id="EN-US_TOPIC_0000001188270556__a6db541e82ca64d86b97a19864343065b">loid</strong><p id="EN-US_TOPIC_0000001188270556__a7c87cd19d0744d4794e42e023be0201f">Identifier of the large object that includes this page</p>
<p id="EN-US_TOPIC_0000001188270556__aba7e91b993324567885965bb1528104e">Value range: a string. It must comply with the naming convention.</p>
</li></ul>
</div>
<div class="section" id="EN-US_TOPIC_0000001188270556__section728872319154"><h4 class="sectiontitle">Examples</h4><p id="EN-US_TOPIC_0000001188270556__p29921744133119">Create two users:</p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen21996219322"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">CREATE</span><span class="w"> </span><span class="k">USER</span><span class="w"> </span><span class="n">joe</span><span class="w"> </span><span class="n">PASSWORD</span><span class="w"> </span><span class="s1">'{Password}'</span><span class="p">;</span>
<span class="k">CREATE</span><span class="w"> </span><span class="k">USER</span><span class="w"> </span><span class="n">kim</span><span class="w"> </span><span class="n">PASSWORD</span><span class="w"> </span><span class="s1">'{Password}'</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001188270556__p125701236193215">Create a schema:</p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen013720565320"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">CREATE</span><span class="w"> </span><span class="k">SCHEMA</span><span class="w"> </span><span class="n">tpcds</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001188270556__p15519940153211">Create a table:</p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen1096317417337"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">CREATE</span><span class="w"> </span><span class="k">TABLE</span><span class="w"> </span><span class="k">IF</span><span class="w"> </span><span class="k">NOT</span><span class="w"> </span><span class="k">EXISTS</span><span class="w"> </span><span class="n">tpcds</span><span class="p">.</span><span class="n">reason</span><span class="p">(</span><span class="n">r_reason_sk</span><span class="w"> </span><span class="nb">int</span><span class="p">,</span><span class="n">r_reason_id</span><span class="w"> </span><span class="nb">int</span><span class="p">,</span><span class="n">r_reason_desc</span><span class="w"> </span><span class="nb">int</span><span class="p">);</span>
</pre></div></td></tr></table></div>
</div>
<ul id="EN-US_TOPIC_0000001188270556__ul11236171913462"><li id="EN-US_TOPIC_0000001188270556__li1723813191462"><strong id="EN-US_TOPIC_0000001188270556__b14206202191719">Grant system permissions to a user or role.</strong><ul id="EN-US_TOPIC_0000001188270556__ul1387010323468"><li id="EN-US_TOPIC_0000001188270556__li112381219174617">Grant all available permissions of user <strong id="EN-US_TOPIC_0000001188270556__b15098618633356">sysadmin</strong> to user <strong id="EN-US_TOPIC_0000001188270556__b4104849013356">joe</strong>:<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen42891823131516"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">joe</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001188270556__p774322634616">Afterward, user <strong id="EN-US_TOPIC_0000001188270556__b2880981933356">joe</strong> has the sysadmin permissions.</p>
</li></ul>
</li><li id="EN-US_TOPIC_0000001188270556__li20238419164620"><strong id="EN-US_TOPIC_0000001188270556__b1839611103197">Grant object permissions to a user or role.</strong><ul id="EN-US_TOPIC_0000001188270556__ul044913556244"><li id="EN-US_TOPIC_0000001188270556__li177606220220">Grant the SELECT permission on the <strong id="EN-US_TOPIC_0000001188270556__b11106949141013"><span id="EN-US_TOPIC_0000001188270556__text1444312161584">tpcds.</span>reason</strong> table to user <strong id="EN-US_TOPIC_0000001188270556__b14681135271012">joe</strong>:<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen37134337214"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="k">SELECT</span><span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">TABLE</span><span class="w"> </span><span class="n">tpcds</span><span class="p">.</span><span class="n">reason</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">joe</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__li154523517475">Grant all permissions of the <strong id="EN-US_TOPIC_0000001188270556__b92551042110"><span id="EN-US_TOPIC_0000001188270556__text16662939133316">tpcds.</span>reason</strong> table to user <strong id="EN-US_TOPIC_0000001188270556__b67359717119">kim</strong>.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen125343112583"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="k">ALL</span><span class="w"> </span><span class="k">PRIVILEGES</span><span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="n">tpcds</span><span class="p">.</span><span class="n">reason</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">kim</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001188270556__p19456198789">After the granting succeeds, user <strong id="EN-US_TOPIC_0000001188270556__b196410221493358">kim</strong> has all the permissions of the <strong id="EN-US_TOPIC_0000001188270556__b95078503293358"><span id="EN-US_TOPIC_0000001188270556__text51448238893358">tpcds.</span>reason</strong> table, including the add, delete, modify, and query permissions.</p>
</li><li id="EN-US_TOPIC_0000001188270556__li5237151920469">Grant the permission to use the <strong id="EN-US_TOPIC_0000001188270556__b294711715419">tpcds</strong> schema to user <strong id="EN-US_TOPIC_0000001188270556__b127195914411">joe</strong>.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen13291152311517"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="k">USAGE</span><span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">SCHEMA</span><span class="w"> </span><span class="n">tpcds</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">joe</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001188270556__p1329112235154">After the authorization is successful, user <strong id="EN-US_TOPIC_0000001188270556__b11605181549">joe</strong> has the <strong id="EN-US_TOPIC_0000001188270556__b121291122146">USAGE</strong> permission of the schema and can access the objects contained in the schema.</p>
</li><li id="EN-US_TOPIC_0000001188270556__li11237101934610">Grant the query permission for the <strong id="EN-US_TOPIC_0000001188270556__b8861240523356">r_reason_sk</strong>, <strong id="EN-US_TOPIC_0000001188270556__b14244873113356">r_reason_id</strong>, and <strong id="EN-US_TOPIC_0000001188270556__b5853715843356">r_reason_desc</strong> columns and the update permission for the <strong id="EN-US_TOPIC_0000001188270556__b19127006903356">r_reason_desc</strong> column in the <strong id="EN-US_TOPIC_0000001188270556__b13357093843356"><span id="EN-US_TOPIC_0000001188270556__text6132631673356">tpcds.</span>reason</strong> table to user <strong id="EN-US_TOPIC_0000001188270556__b6473088973356">joe</strong>:<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen6293523161513"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="k">select</span><span class="w"> </span><span class="p">(</span><span class="n">r_reason_sk</span><span class="p">,</span><span class="n">r_reason_id</span><span class="p">,</span><span class="n">r_reason_desc</span><span class="p">),</span><span class="k">update</span><span class="w"> </span><span class="p">(</span><span class="n">r_reason_desc</span><span class="p">)</span><span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="n">tpcds</span><span class="p">.</span><span class="n">reason</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">joe</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
<p id="EN-US_TOPIC_0000001188270556__p429415234150">After the granting succeeds, user <strong id="EN-US_TOPIC_0000001188270556__b9666194693356">joe</strong> immediately has the query permission of the <strong id="EN-US_TOPIC_0000001188270556__b16630879873356">r_reason_sk</strong> and <strong id="EN-US_TOPIC_0000001188270556__b18116148813356">r_reason_id</strong> columns in the <strong id="EN-US_TOPIC_0000001188270556__b15668606733356"><span id="EN-US_TOPIC_0000001188270556__text2538456253356">tpcds.</span>reason</strong> table. </p>
<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen529472311159"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="k">select</span><span class="w"> </span><span class="p">(</span><span class="n">r_reason_sk</span><span class="p">,</span><span class="w"> </span><span class="n">r_reason_id</span><span class="p">)</span><span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="n">tpcds</span><span class="p">.</span><span class="n">reason</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">joe</span><span class="w"> </span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__li1495195155217">Grant the <strong id="EN-US_TOPIC_0000001188270556__b7152175918123">EXECUTE</strong> permission of the <strong id="EN-US_TOPIC_0000001188270556__b1463156181310">func_add_sql</strong> function to user <strong id="EN-US_TOPIC_0000001188270556__b7167119121320">joe</strong>.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen3117732972"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span>
<span class="normal">3</span>
<span class="normal">4</span>
<span class="normal">5</span>
<span class="normal">6</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">CREATE</span><span class="w"> </span><span class="k">FUNCTION</span><span class="w"> </span><span class="n">func_add_sql</span><span class="p">(</span><span class="nb">integer</span><span class="p">,</span><span class="w"> </span><span class="nb">integer</span><span class="p">)</span><span class="w"> </span><span class="k">RETURNS</span><span class="w"> </span><span class="nb">integer</span>
<span class="w"> </span><span class="k">AS</span><span class="w"> </span><span class="s1">'select $1 + $2;'</span>
<span class="w"> </span><span class="k">LANGUAGE</span><span class="w"> </span><span class="k">SQL</span>
<span class="w"> </span><span class="k">IMMUTABLE</span>
<span class="w"> </span><span class="k">RETURNS</span><span class="w"> </span><span class="k">NULL</span><span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">NULL</span><span class="w"> </span><span class="k">INPUT</span><span class="p">;</span>
<span class="k">GRANT</span><span class="w"> </span><span class="k">EXECUTE</span><span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">FUNCTION</span><span class="w"> </span><span class="n">func_add_sql</span><span class="p">(</span><span class="nb">integer</span><span class="p">,</span><span class="w"> </span><span class="nb">integer</span><span class="p">)</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">joe</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__li7470171528">Grant the <strong id="EN-US_TOPIC_0000001188270556__b533316253131">UPDATE </strong>permission of the sequence <strong id="EN-US_TOPIC_0000001188270556__b17340938131317">serial</strong> to user <strong id="EN-US_TOPIC_0000001188270556__b1896044031319">joe</strong>.<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen3138132071118"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span>
<span class="normal">2</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">CREATE</span><span class="w"> </span><span class="n">SEQUENCE</span><span class="w"> </span><span class="nb">serial</span><span class="w"> </span><span class="k">START</span><span class="w"> </span><span class="mi">101</span><span class="w"> </span><span class="k">CACHE</span><span class="w"> </span><span class="mi">20</span><span class="p">;</span>
<span class="k">GRANT</span><span class="w"> </span><span class="k">UPDATE</span><span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="n">SEQUENCE</span><span class="w"> </span><span class="nb">serial</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">joe</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__li12395147112517">Grant the <strong id="EN-US_TOPIC_0000001188270556__b3321076733356"></strong><strong id="EN-US_TOPIC_0000001188270556__b7656796903356"><span id="EN-US_TOPIC_0000001188270556__text16408536233356">gaussdb</span></strong> database connection permission and schema creation permission to user <strong id="EN-US_TOPIC_0000001188270556__b7752654243356">joe</strong>:<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen52961423131518"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="k">create</span><span class="p">,</span><span class="k">connect</span><span class="w"> </span><span class="k">on</span><span class="w"> </span><span class="k">database</span><span class="w"> </span><span class="n">gaussdb</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">joe</span><span class="w"> </span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__li136292026261">Grant the <strong id="EN-US_TOPIC_0000001188270556__b62111223124215">tpcds</strong> schema access permission and object creation permission to <strong id="EN-US_TOPIC_0000001188270556__b896018318434">joe</strong>, but do not enable it to grant these permissions to others:<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen15124501257"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="k">USAGE</span><span class="p">,</span><span class="k">CREATE</span><span class="w"> </span><span class="k">ON</span><span class="w"> </span><span class="k">SCHEMA</span><span class="w"> </span><span class="n">tpcds</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">joe</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li></ul>
</li><li id="EN-US_TOPIC_0000001188270556__li523801916461"><strong id="EN-US_TOPIC_0000001188270556__b11134922314">Grant the permissions of a user or role to other users or roles.</strong><ul id="EN-US_TOPIC_0000001188270556__ul723781964619"><li id="EN-US_TOPIC_0000001188270556__li192371519114612">Grant the permissions of user <strong id="EN-US_TOPIC_0000001188270556__b6718720093356">joe</strong> to user <strong id="EN-US_TOPIC_0000001188270556__b13532633563356">kim</strong>, and allow <strong id="EN-US_TOPIC_0000001188270556__b5507828143356">kim</strong> to grant these permissions to others:<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen1229822310158"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="n">joe</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">kim</span><span class="w"> </span><span class="k">WITH</span><span class="w"> </span><span class="k">ADMIN</span><span class="w"> </span><span class="k">OPTION</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li><li id="EN-US_TOPIC_0000001188270556__li107355518267">Grant the permissions of user <strong id="EN-US_TOPIC_0000001188270556__b16863134563356">joe</strong> to user <strong id="EN-US_TOPIC_0000001188270556__b3428998943356">kim</strong>:<div class="codecoloring" codetype="Sql" id="EN-US_TOPIC_0000001188270556__screen182987236153"><div class="highlight"><table class="highlighttable"><tr><td class="linenos"><div class="linenodiv"><pre><span class="normal">1</span></pre></div></td><td class="code"><div><pre><span></span><span class="k">GRANT</span><span class="w"> </span><span class="n">joe</span><span class="w"> </span><span class="k">TO</span><span class="w"> </span><span class="n">kim</span><span class="p">;</span>
</pre></div></td></tr></table></div>
</div>
</li></ul>
</li></ul>
</div>
<div class="section" id="EN-US_TOPIC_0000001188270556__sab9c26bdf78243babf26147ee56f736f"><h4 class="sectiontitle">Helpful Links</h4><p id="EN-US_TOPIC_0000001188270556__a3c1ed25e9afb4d8b9108b3b03147f0e0"><a href="dws_06_0253.html">REVOKE</a>, <a href="dws_06_0244.html">ALTER DEFAULT PRIVILEGES</a></p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="dws_06_0242.html">DCL Syntax</a></div>
</div>
</div>
View Git Blame Copy Permalink