User operations

Create a new user

CREATE [OR REPLACE] USER [IF NOT EXISTS] <user_name>
    [SET DEFAULT WORKER POOL <pool_id>]
    [IDENTIFIED BY (TRUST <ip_address> | PASSWORD <user_password>)];

Creates a new user with the specified name.

Modifier OR REPLACE

If the optional OR REPLACE modifier is specified, this action is equivalent to deleting the current user and creating a new user with the same username. the current user and creating a new user with the same username. The newly created user does not inherit any roles or attributes.

Modifier IF NOT EXISTS

If the optional IF NOT EXISTS modifier is specified, the query will only be executed if the user named <user_name> does not exist, otherwise nothing will happen.

The OR REPLACE and IF NOT EXISTS modifiers are mutually exclusive. Specifying them both will result in an error.

Parameter SET DEFAULT WORKER POOL

The optional parameter SET DEFAULT WORKER POOL <pool_id> sets the default compute pool <pool_id> for the specified user.

Parameter IDENTIFIED BY TRUST

The optional parameter IDENTIFIED BY TRUST <ip_address> sets the authentication of the specified user through the IP address <ip_address>.

See examples 

  • CREATE USER ivanov IDENTIFIED BY TRUST '127.0.0.1';

  • ALTER USER ivanov IDENTIFIED BY TRUST '127.0.0.1';

Parameter IDENTIFIED BY PASSWORD

The optional parameter IDENTIFIED BY PASSWORD <user_password> sets the authentication of the specified user through the password <user_password> using the SCRAM-SHA-256 algorithm.

See examples 

  • CREATE USER ivanov IDENTIFIED BY PASSWORD 'QWERTY123456';

  • ALTER USER ivanov IDENTIFIED BY PASSWORD 'QWERTY123456';

Change user attributes

ALTER USER [IF EXISTS] <username>
    RENAME TO <new_name>;

ALTER USER [IF EXISTS] <username>
    SET DEFAULT WORKER POOL <pool_id>;

ALTER USER [IF EXISTS] <username>
    IDENTIFIED BY (TRUST <ip_address> | PASSWORD <user_password>);

Modifies the user’s attributes.

The optional IF EXISTS modifier restricts the query to only those cases in which the specified object exists.

Reset user

DROP USER [IF EXISTS] <username>;

Completely removes the user from the system.

Nothing is saved, including granted roles and access rights.

It is possible that some objects may lose access rights.

The optional IF EXISTS modifier restricts the query to only those cases in which the specified object exists.

Display information about the user

DESC[RIBE] USER <username>;

Outputs all information about the user, including their attributes and default values.

Display a list of all users

SHOW USERS;

Display a list of all registered users.