CREATE ROLE
Examples
SELLERS
CREATE ROLE SELLERS;
SELECT_ALL
with the system privilege to select from any selectable objectCREATE ROLE SELECT_ALL
SET SYSTEM PRIVILEGES TO SELECT_ANY_OBJECT_IN_DATABASE;
CREATE ROLE
ExamplesSELLERS
CREATE ROLE SELLERS;
SELECT_ALL
with the system privilege to select from any selectable objectCREATE ROLE SELECT_ALL
SET SYSTEM PRIVILEGES TO SELECT_ANY_OBJECT_IN_DATABASE;
ALTER ROLE
Alters a role
DSQL
ALTER ROLE rolename { SET SYSTEM PRIVILEGES TO <sys_privileges> | DROP SYSTEM PRIVILEGES | {SET | DROP} AUTO ADMIN MAPPING } <sys_privileges> ::= !! See [fblangref50-security-role-create] !!
Parameter | Description |
---|---|
rolename |
Role name;specifying anything other than |
sys_privilege |
System privilege to grant |
ALTER ROLE
can be used to grant or revoke system privileges from a role, or enable and disable the capability for Windows Administrators to assume administrator privileges automatically when logging in.
This last capability can affect only one role: the system-generated role RDB$ADMIN
.
For details on auto admin mapping, see AUTO ADMIN MAPPING
.
It is not possible to selectively grant or revoke system privileges.Only the privileges listed in the SET SYSTEM PRIVILEGES
clause will be available to the role after commit, and DROP SYSTEM PRIVILEGES
will remove all system privileges from this role.