CREATE ROLE

Purpose

This statement is used to create a role. You can manage permissions through roles.

Privilege requirements

• To create a role, the current user must have the CREATE USER or CREATE ROLE privilege. For more information about OceanBase Database privileges, see Privilege types in MySQL mode.

• If the value of the system variable read_only is 1 in the current tenant, indicating that the tenant is in read-only mode, the current user must also have the SUPER privilege to execute the CREATE ROLE statement.

  The system variable read_only specifies whether the tenant is in read-only mode. By default, it is 0, indicating that the tenant is in read/write mode. For more information about the system variable read_only, see read_only.

Syntax

CREATE ROLE [IF NOT EXISTS] role_name [, role_name ...];

Parameters

Examples

• Create a role named role001.

  obclient [test]> CREATE ROLE role001;
  

• Create roles named role001 and role002 at the same time.

  obclient [test]> CREATE ROLE IF NOT EXISTS role001, role002;
  

  The return result is as follows:

  Query OK, 0 rows affected, 1 warning
  

  Use the SHOW WARNINGS; statement to query the warning information. The return result is as follows:

  +-------+------+-----------------------------------------------+
  | Level | Code | Message                                       |
  +-------+------+-----------------------------------------------+
  | Note  | 3163 | Authorization ID 'role001'@'%' already exists |
  +-------+------+-----------------------------------------------+
  1 row in set
  

References

• Create a role
• Grant privileges to a role
• Grant a role to a user or role
• View roles
• Indirect authorization