User account management
ALTER USER
ALTER USER modifies user information, including password, authentication method, default roles, and user properties (supported from v3.3.3 onwards).
CREATE ROLE
CREATE ROLE creates a role. After a role is created, you can grant privileges to the role and then assign this role to a user or another role. This way, the privileges associated with this role are passed on to users or roles.
CREATE USER
CREATE USER creates a StarRocks user. In StarRocks, a "user_identity" uniquely identifies a user. From v3.3.3, StarRocks supports setting user properties when creating a user.
DROP ROLE
DROP ROLE drops a role. If a role has been granted to a user, the user will lose the privileges associated with this role after the role is dropped.
DROP USER
DROP USER drops a specified user identity.
EXECUTE AS
Use the IMPERSONATE privilege with EXECUTE AS statements to switch the execution context of the current session to the impersonated user.
GRANT
Grants roles or privileges on specific objects to a user, a role, or an external group.
REVOKE
Use REVOKE to remove specific privileges or roles from a user or a role. For the privileges supported by StarRocks, see Privileges supported by StarRocks.
SET DEFAULT ROLE
SET DEFAULT ROLE sets the roles that are activated by default when the user connects to the server.
SET PASSWORD
SET PASSWORD changes the login password for users. The ALTER USER command can also be used to change a password.
SET ROLE
SET ROLE activates roles, along with all of its associated privileges and nested roles, for the current session. After the role is activated, users can use this role to perform operations.
SHOW AUTHENTICATION
SHOW AUTHENTICATION displays the authentication information of the current user or all users in the current cluster.
SHOW GRANTS
SHOW GRANTS displays all the privileges that have been granted to a user or role.
SHOW PROPERTY
SHOW PROPERTY displays properties of a user. Currently, only the maximum number of connections can be viewed using this command.
SHOW ROLES
SHOW ROLES displays all roles in the system. You can use SHOW GRANTS FOR ROLE ; to view the privileges of a specific role. For more information, see SHOW GRANTS.
SHOW USERS
SHOW USERS displays all users in the system. Users mentioned here are user identities, not user names. For more information about user identities, see CREATE USER. This command is supported from v3.0.