ClickHouse/docs/en/operations/system-tables/role-grants.md

#system.role_grants {#system_tables-role_grants}

Contains the role grants for users and roles. To add entries to this table, use GRANT role TO user.

Columns:

• user_name (Nullable(String)) — User name.

• role_name (Nullable(String)) — Role name.

• granted_role_name (String) — Name of role granted to the role_name role. To grant one role to another one use GRANT role1 TO role2.

• granted_role_is_default (UInt8) — Flag that shows whether granted_role is a default role. Possible values:

  • 1 — granted_role is a default role.
  • 0 — granted_role is not a default role.

• with_admin_option (UInt8) — Flag that shows whether granted_role is a role with ADMIN OPTION privilege. Possible values:

  • 1 — The role has ADMIN OPTION privilege.
  • 0 — The role without ADMIN OPTION privilege.

Original article