CREATE ROLE

Purpose

You can use this statement to create a role. You can use roles to manage database privileges.

Required privileges

• You must have the CREATE USER privilege. For more information about privileges in OceanBase Database, see Privilege types in MySQL mode.

• If the value of the system variable read_only is 1 in the current tenant, the tenant is in read-only mode. In this case, you must also have the SUPER privilege to execute the CREATE ROLE statement.

  The system variable read_only specifies whether the tenant is in read-only mode. The default value is 0, indicating that the tenant is in read-write mode. For more information about the system variable read_only, see read_only.

Syntax

CREATE ROLE [IF NOT EXISTS] role_name [, role_name ...];

Parameters

Examples

• Create a role named role001.

  obclient [test]> CREATE ROLE role001;
  

• Create the role001 and role002 roles.

  obclient [test]> CREATE ROLE IF NOT EXISTS role001, role002;
  

  The return result is as follows:

  Query OK, 0 rows affected, 1 warning
  

  Use the SHOW WARNINGS; statement to query warnings. The return result is as follows:

  +-------+------+-----------------------------------------------+
  | Level | Code | Message                                       |
  +-------+------+-----------------------------------------------+
  | Note  | 3163 | Authorization ID 'role001'@'%' already exists |
  +-------+------+-----------------------------------------------+
  1 row in set
  

References

• Create a role
• Add privileges to a role
• Grant a role to a user or role
• View roles
• Indirectly grant privileges