User, role, & privilege commands¶

User, role, and privilege commands enable you to manage your users, roles, and privileges.

User management¶

• CREATE USER
• ALTER USER
• DROP USER
• DESCRIBE USER
• SHOW USERS

Programmatic access token management¶

• ALTER USER … ADD PROGRAMMATIC ACCESS TOKEN (PAT)
• ALTER USER … MODIFY PROGRAMMATIC ACCESS TOKEN (PAT)
• ALTER USER … ROTATE PROGRAMMATIC ACCESS TOKEN (PAT)
• ALTER USER … REMOVE PROGRAMMATIC ACCESS TOKEN (PAT)
• SHOW USER PROGRAMMATIC ACCESS TOKENS

Key pair management¶

• ALTER USER … ADD KEY PAIR
• ALTER USER … MODIFY KEY PAIR
• ALTER USER … ROTATE KEY PAIR
• ALTER USER … REMOVE KEY PAIR
• SHOW USER KEY PAIRS

Workload identity federation management¶

• SHOW USER WORKLOAD IDENTITY AUTHENTICATION METHODS

Organization user management¶

• CREATE ORGANIZATION USER
• ALTER ORGANIZATION USER
• DROP ORGANIZATION USER
• SHOW ORGANIZATION USERS

Organization user group management¶

• CREATE ORGANIZATION USER GROUP
• ALTER ORGANIZATION USER GROUP
• DROP ORGANIZATION USER GROUP
• SHOW ORGANIZATION USER GROUPS

Database role management¶

• CREATE DATABASE ROLE
• ALTER DATABASE ROLE
• DROP DATABASE ROLE
• SHOW DATABASE ROLES
• GRANT DATABASE ROLE
• REVOKE DATABASE ROLE
• GRANT DATABASE ROLE … TO SHARE
• REVOKE DATABASE ROLE … FROM SHARE

Account-level role management¶

• CREATE ROLE
• ALTER ROLE
• DROP ROLE
• SHOW ROLES
• USE ROLE
• USE SECONDARY ROLES
• GRANT ROLE
• REVOKE ROLE

Privilege management¶

• GRANT <privileges> … TO APPLICATION
• REVOKE <privileges> … FROM APPLICATION
• GRANT <privileges> … TO APPLICATION ROLE
• REVOKE <privileges> … FROM APPLICATION ROLE
• GRANT <privileges> … TO ROLE
• REVOKE <privileges> … FROM ROLE
• GRANT <privileges> … TO USER
• REVOKE <privileges> … FROM USER
• GRANT <privilege> … TO SHARE
• REVOKE <privilege> … FROM SHARE
• GRANT OWNERSHIP
• GRANT CALLER
• REVOKE CALLER
• SHOW CALLER GRANTS
• SHOW GRANTS