SET ROLE|V4.4.2|OceanBase Database| docs|Distributed Database

Purpose

You can use this statement to activate roles granted to the logged-on user in the current session.

The SET ROLE statement takes effect only on the current session. Subsequent sessions are not affected.

SET ROLE {
    DEFAULT
    | NONE
    | ALL
    | ALL EXCEPT role_name [, role_name ...]
    | role_name [, role_name ...]
};

Parameter	Description
DEFAULT	Specifies to retain the default role settings. The system activates roles based on the value of the `activate_all_roles_on_login` variable and the settings configured by the `SET DEFAULT ROLE` or `ALTER USER` statement. If the value of the `activate_all_roles_on_login` variable is `on`, the system activates all roles granted to the user in the current session. If the value of the `activate_all_roles_on_login` variable is `off`, the system activates the default roles specified in the `SET DEFAULT ROLE` or `ALTER USER` statement in the current session.
NONE	Specifies to deactivate all roles granted to a user.
ALL	Specifies to activate all roles granted to a user.
ALL EXCEPT	Specifies to activate all roles granted to a user except for the specified roles.
role_name	The name of the role to be activated. Separate multiple roles with commas (`,`).

Activate all roles granted to the logged-on user, except for role001, in the current session.
```
 obclient [(none)]> SET ROLE ALL EXCEPT role001;
```
Activate the role001 and role002 roles for the logged-on user in the current session.
```
 obclient [(none)]> SET ROLE role001, role002;
```