用户、角色和权限命令

用户、角色和权限命令使您能够管理用户、角色和权限。

用户管理

• CREATE USER
• ALTER USER
• DROP USER
• DESCRIBE USER
• SHOW USERS

编程访问令牌管理

• ALTER USER … ADD PROGRAMMATIC ACCESS TOKEN (PAT)
• ALTER USER … MODIFY PROGRAMMATIC ACCESS TOKEN (PAT)
• ALTER USER … ROTATE PROGRAMMATIC ACCESS TOKEN (PAT)
• ALTER USER … REMOVE PROGRAMMATIC ACCESS TOKEN (PAT)
• SHOW USER PROGRAMMATIC ACCESS TOKENS

Workload identity federation management¶

• SHOW USER WORKLOAD IDENTITY AUTHENTICATION METHODS

组织用户管理

• CREATE ORGANIZATION USER
• ALTER ORGANIZATION USER
• DROP ORGANIZATION USER
• SHOW ORGANIZATION USERS

组织用户组管理

• CREATE ORGANIZATION USER GROUP
• ALTER ORGANIZATION USER GROUP
• DROP ORGANIZATION USER GROUP
• SHOW ORGANIZATION USER GROUPS

数据库角色管理

• CREATE DATABASE ROLE
• ALTER DATABASE ROLE
• DROP DATABASE ROLE
• SHOW DATABASE ROLES
• GRANT DATABASE ROLE
• REVOKE DATABASE ROLE
• GRANT DATABASE ROLE … TO SHARE
• REVOKE DATABASE ROLE … FROM SHARE

账户级角色管理

• CREATE ROLE
• ALTER ROLE
• DROP ROLE
• SHOW ROLES
• USE ROLE
• USE SECONDARY ROLES
• GRANT ROLE
• REVOKE ROLE

权限管理

• GRANT <privileges> … TO APPLICATION
• REVOKE <privileges> … FROM APPLICATION
• GRANT <privileges> … TO APPLICATION ROLE
• REVOKE <privileges> … FROM APPLICATION ROLE
• GRANT <privileges> … TO ROLE
• REVOKE <privileges> … FROM ROLE
• GRANT <privileges> … TO USER
• REVOKE <privileges> … FROM USER
• GRANT <privilege> … TO SHARE
• REVOKE <privilege> … FROM SHARE
• GRANT OWNERSHIP
• GRANT CALLER
• REVOKE CALLER
• SHOW CALLER GRANTS
• SHOW GRANTS