On this page 
Warning:
CockroachDB v1.0 is no longer supported as of November 10, 2018. For more details, refer to the Release Support Policy.
The GRANT statement lets you control each user's SQL privileges for interacting with specific databases and tables.
For privileges required by specific statements, see the documentation for the respective SQL statement.
Synopsis
Required Privileges
The user granting privileges must have the GRANT privilege on the target databases or tables.
Supported Privileges
Users can be granted the following privileges. Some privileges are applicable both for databases and tables, while other are applicable only for tables (see Levels in the table below).
- When a user is granted privileges for a database, new tables created in the database will inherit the privileges, but the privileges can then be changed.
- When a user is granted privileges for a table, the privileges are limited to the table.
- The
rootuser is automatically assigned theALLprivilege for new databases and is the only user allowed to create databases. - For privileges required by specific statements, see the documentation for the respective SQL statement.
| Privilege | Levels |
|---|---|
ALL |
Database, Table |
CREATE |
Database, Table |
DROP |
Database, Table |
GRANT |
Database, Table |
SELECT |
Table |
INSERT |
Table |
DELETE |
Table |
UPDATE |
Table |
Parameters
| Parameter | Description |
|---|---|
table_name |
A comma-separated list of table names. Alternately, to grant privileges to all tables, use *. ON TABLE table.* grants apply to all existing tables in a database but will not affect tables created after the grant. |
database_name |
A comma-separated list of database names. Privileges granted on databases will be inherited by any new tables created in the databases, but do not affect existing tables in the database. |
user_name |
A comma-separated list of users. |
Examples
Grant privileges on databases
> GRANT CREATE ON DATABASE db1, db2 TO maxroach, betsyroach;
> SHOW GRANTS ON DATABASE db1, db2;
+----------+------------+------------+
| Database | User | Privileges |
+----------+------------+------------+
| db1 | betsyroach | CREATE |
| db1 | maxroach | CREATE |
| db1 | root | ALL |
| db2 | betsyroach | CREATE |
| db2 | maxroach | CREATE |
| db2 | root | ALL |
+----------+------------+------------+
(6 rows)
Grant privileges on specific tables in a database
> GRANT DELETE ON TABLE db1.t1, db1.t2 TO betsyroach;
> SHOW GRANTS ON TABLE db1.t1, db1.t2;
+-------+------------+------------+
| Table | User | Privileges |
+-------+------------+------------+
| t1 | betsyroach | DELETE |
| t1 | root | ALL |
| t2 | betsyroach | DELETE |
| t2 | root | ALL |
+-------+------------+------------+
(4 rows)
Grant privileges on all tables in a database
> GRANT SELECT ON TABLE db2.* TO henryroach;
> SHOW GRANTS ON TABLE db2.*;
+-------+------------+------------+
| Table | User | Privileges |
+-------+------------+------------+
| t1 | henryroach | SELECT |
| t1 | root | ALL |
| t2 | henryroach | SELECT |
| t2 | root | ALL |
+-------+------------+------------+
(4 rows)
See Also
Was this helpful?
