Role Management

Overview

Create roles to group permissions. Roles make it easy to manage access for groups of users.

Built-in System Roles:

Role Statements

Creating Roles

GQL
CREATE ROLE 'data_reader'

With description:

GQL
CREATE ROLE 'schema_manager' DESCRIPTION 'Can modify database schema'

Altering Roles

Rename a role:

GQL
ALTER ROLE 'data_reader' RENAME TO 'analytics_reader'

Update description:

GQL
ALTER ROLE 'data_reader' SET DESCRIPTION 'Read-only access for analytics'

Dropping Roles

GQL
DROP ROLE 'data_reader'

Use IF EXISTS to avoid errors:

GQL
DROP ROLE IF EXISTS 'data_reader'

Showing Roles

List all roles:

GQL
SHOW ROLES

Result:

Show specific role:

GQL
SHOW ROLE admin