Skip to main content
Version: current [26.x Preview]

SYS.ROLES

The sys.roles table contains role metadata.

Syntax
SELECT * FROM sys.roles

Example Output

role_idrole_namerole_typeowner_idowner_typecreated_by
3d0188ad-c79a-4339-90e1-8f53f2021065PUBLICLOCAL$dremio$userLOCAL
700e5ad4-4c37-44d1-99bf-9bbadf998ceeUSERADMINLOCAL01329e94-afab-4393-b101-345fe68814b8roleLOCAL
95242298-a1da-4a10-bd8e-27260685c0a5ADMINLOCAL$dremio$userLOCAL
ffe21b2e-2f54-4788-b808-78fbddec36a8DEVADMINEXTERNAL$dremio$userSCIM
01cc4941-9003-4452-be6d-3bc39dae1e78TESTEREXTERNAL$dremio$userAUTO_SYNC

Fields

FieldData TypeDescription
role_idvarcharThe UUID to identify the role
role_namevarcharThe user- or system-defined name of the role
role_typevarcharThe role type
Valid values:
LOCAL: A role created and managed within Dremio
EXTERNAL: A role created and managed by an external authentication service like Okta or Microsoft Entra ID
owner_idvarcharThe UUID for the owner (user or role) of the role. This UUID corresponds to the id in the users or roles table. When there is no explicit owner set, the default is $dremio$.
owner_typevarcharThe type of owner of the role.
Valid values:
USER
ROLE
created_byvarcharThe method of creation
Valid values:
LOCAL: All LOCAL role_types
AUTO_SYNC: An EXTERNAL role created in Dremio with the role name from an external provider or referenced in Dremio in a privilege grant
SCIM: An EXTERNAL role pushed to Dremio via SCIM