Manage Cluster User Authorization

This page documents procedures for managing the lifecycle of SQL users and roles on CockroachDB clusters. Procedures for managing access are covered in Managing Access in CockroachDB Cloud.

​

Create CockroachDB users

Use the CREATE USER and DROP USER statements to create and remove users, the ALTER USER statement to add or change a user’s password and role options, the GRANT and REVOKE statements to manage the user’s privileges, and the SHOW USERS statement to list users. A new user must be granted the required privileges for each database and table that the user needs to access.

​

Create and manage roles

For examples showing how to create and manage your cluster’s users and roles, see the following documentation:

​

See also

• Client Connection Parameters
• SQL Statements
• CREATE USER
• ALTER USER
• DROP USER
• SHOW USERS
• CREATE ROLE
• ALTER ROLE
• DROP ROLE
• SHOW ROLES
• GRANT
• REVOKE
• SHOW GRANTS