Dremio Cloud
Dremio Software
 
On this page

    GRANT TO USER

    Access to Dremio objects can be managed by granting privileges to users. A privilege is the right to perform a specific action on an object.

    Syntax 
    GRANT { objectPrivilege | ALL } ON { <object_type> <object_name> }
TO USER <username>
    objectPrivilege 
    -- On Organizations
{ CONFIGURE SECURITY | CREATE CATALOG | CREATE CLOUD | CREATE PROJECT | MANAGE GRANTS | OWNERSHIP } [, ...]
-- On Clouds
{ MANAGE GRANTS | MODIFY | MONITOR | OWNERSHIP } [, ...]
-- On Projects
{ ALTER | ALTER REFLECTION | CREATE TABLE | DROP | EXTERNAL QUERY | MANAGE GRANTS | MODIFY | MONITOR | OPERATE | OWNERSHIP | SELECT | USAGE | VIEW JOB HISTORY | VIEW REFLECTION } [, ...]
-- On Engines
{ MODIFY | MONITOR | OPERATE | OWNERSHIP | USAGE } [, ...]
-- On Identity and Token Providers
{ MODIFY | MONITOR | OPERATE | USAGE } [, ...]
-- On Sources
{ ALTER | ALTER REFLECTION | CREATE TABLE | DROP | EXTERNAL QUERY | MANAGE GRANTS | MODIFY | OWNERSHIP | SELECT } [, ...]
-- On Spaces
{ ALTER | ALTER REFLECTION | MANAGE GRANTS | MODIFY | OWNERSHIP | SELECT } [, ...]
-- On Folders
{ ALTER | ALTER REFLECTION | CREATE TABLE | DROP | MANAGE GRANTS | OWNERSHIP | SELECT } [, ...]
-- On Tables
{ ALTER | MANAGE GRANTS | OWNERSHIP } [, ...]
-- On Views
{ ALTER | MANAGE GRANTS | OWNERSHIP } [, ...]
-- On Roles
{ ALTER | MANAGE GRANTS | OWNERSHIP } [, ...]
-- On Users
{ ALTER | MANAGE GRANTS | OWNERSHIP } [, ...]

    Parameters

    <objectPrivilege>

    String

    The privilege(s) to be granted to the user. A comma-separated list of privileges can be specified. For more information, read all supported privileges.

    <object_type>

    String

    The name of the type of object on which the specified privilege is being granted.

    EnumORG, CLOUD, PROJECT, ENGINE, SOURCE, SPACE, IDENTITY PROVIDER, EXTERNAL TOKEN, FOLDER, PDS, VDS

    <object_name>

    String

    The name of the object on which the privilege is being granted. Object names need to be qualified with the path if they are nested.

    note:

    For <object_type> ORG or PROJECT, the <object_name> is inferred and should be omitted from the statement.

    <username>

    String

    The username of the user to whom the privilege is being granted.

    Examples

    Grant SELECT privilege on the project to user 
    GRANT SELECT
ON PROJECT
TO USER "user@dremio.com"
    Grant ALTER and SELECT privileges on a space to a user 
    GRANT ALTER, SELECT
ON SPACE "Application"
TO USER "user@dremio.com"
    Grant OWNERSHIP privilege on a user to a user 
    GRANT OWNERSHIP
ON USER "user1@dremio.com"
TO USER "user@dremio.com"
    Grant MODIFY privileges on an identity provider to a user 
    GRANT MONITOR
ON IDENTITY PROVIDER "0oarj64sbnrVQBBy"
TO USER "user@dremio.com"