system.privileges

Description

Contains a list of all available privileges that could be granted to a user or role.

Columns

• privilege (Enum16('SHOW DATABASES' = 0, 'SHOW TABLES' = 1, 'CHECK' = 2, 'SHOW COLUMNS' = 3, 'SHOW DICTIONARIES' = 4, 'SHOW' = 5, 'SHOW FILESYSTEM CACHES' = 6, 'SELECT' = 7, 'INSERT' = 8, 'ALTER UPDATE' = 9, 'ALTER DELETE' = 10, 'ALTER ADD COLUMN' = 11, 'ALTER MODIFY COLUMN' = 12, 'ALTER DROP COLUMN' = 13, 'ALTER COMMENT COLUMN' = 14, 'ALTER CLEAR COLUMN' = 15, 'ALTER RENAME COLUMN' = 16, 'ALTER MATERIALIZE COLUMN' = 17, 'ALTER COLUMN' = 18, 'ALTER MODIFY COMMENT' = 19, 'ALTER MODIFY DATABASE COMMENT' = 20, 'ALTER ORDER BY' = 21, 'ALTER SAMPLE BY' = 22, 'ALTER ADD INDEX' = 23, 'ALTER DROP INDEX' = 24, 'ALTER MATERIALIZE INDEX' = 25, 'ALTER CLEAR INDEX' = 26, 'ALTER INDEX' = 27, 'ALTER ADD STATISTICS' = 28, 'ALTER DROP STATISTICS' = 29, 'ALTER MODIFY STATISTICS' = 30, 'ALTER MATERIALIZE STATISTICS' = 31, 'ALTER STATISTICS' = 32, 'ALTER ADD PROJECTION' = 33, 'ALTER DROP PROJECTION' = 34, 'ALTER MATERIALIZE PROJECTION' = 35, 'ALTER CLEAR PROJECTION' = 36, 'ALTER PROJECTION' = 37, 'ALTER ADD CONSTRAINT' = 38, 'ALTER DROP CONSTRAINT' = 39, 'ALTER CONSTRAINT' = 40, 'ALTER TTL' = 41, 'ALTER MATERIALIZE TTL' = 42, 'ALTER REWRITE PARTS' = 43, 'ALTER SETTINGS' = 44, 'ALTER MOVE PARTITION' = 45, 'ALTER FETCH PARTITION' = 46, 'ALTER FREEZE PARTITION' = 47, 'ALTER UNLOCK SNAPSHOT' = 48, 'ALTER EXECUTE' = 49, 'ALTER DATABASE SETTINGS' = 50, 'ALTER NAMED COLLECTION' = 51, 'ALTER TABLE' = 52, 'ALTER DATABASE' = 53, 'ALTER VIEW MODIFY QUERY' = 54, 'ALTER VIEW MODIFY REFRESH' = 55, 'ALTER VIEW MODIFY SQL SECURITY' = 56, 'ALTER VIEW' = 57, 'ALTER' = 58, 'CREATE DATABASE' = 59, 'CREATE TABLE' = 60, 'CREATE VIEW' = 61, 'CREATE DICTIONARY' = 62, 'CREATE TEMPORARY TABLE' = 63, 'CREATE ARBITRARY TEMPORARY TABLE' = 64, 'CREATE TEMPORARY VIEW' = 65, 'CREATE FUNCTION' = 66, 'CREATE WORKLOAD' = 67, 'CREATE RESOURCE' = 68, 'CREATE NAMED COLLECTION' = 69, 'CREATE' = 70, 'DROP DATABASE' = 71, 'DROP TABLE' = 72, 'DROP VIEW' = 73, 'DROP DICTIONARY' = 74, 'DROP FUNCTION' = 75, 'DROP WORKLOAD' = 76, 'DROP RESOURCE' = 77, 'DROP NAMED COLLECTION' = 78, 'DROP' = 79, 'UNDROP TABLE' = 80, 'TRUNCATE' = 81, 'OPTIMIZE' = 82, 'BACKUP' = 83, 'KILL QUERY' = 84, 'KILL TRANSACTION' = 85, 'MOVE PARTITION BETWEEN SHARDS' = 86, 'CREATE USER' = 87, 'ALTER USER' = 88, 'DROP USER' = 89, 'CREATE ROLE' = 90, 'ALTER ROLE' = 91, 'DROP ROLE' = 92, 'ROLE ADMIN' = 93, 'CREATE ROW POLICY' = 94, 'ALTER ROW POLICY' = 95, 'DROP ROW POLICY' = 96, 'CREATE MASKING POLICY' = 97, 'ALTER MASKING POLICY' = 98, 'DROP MASKING POLICY' = 99, 'CREATE QUOTA' = 100, 'ALTER QUOTA' = 101, 'DROP QUOTA' = 102, 'CREATE SETTINGS PROFILE' = 103, 'ALTER SETTINGS PROFILE' = 104, 'DROP SETTINGS PROFILE' = 105, 'ALLOW SQL SECURITY NONE' = 106, 'SHOW USERS' = 107, 'SHOW ROLES' = 108, 'SHOW ROW POLICIES' = 109, 'SHOW QUOTAS' = 110, 'SHOW SETTINGS PROFILES' = 111, 'SHOW MASKING POLICIES' = 112, 'SHOW ACCESS' = 113, 'IMPERSONATE' = 114, 'ACCESS MANAGEMENT' = 115, 'SHOW NAMED COLLECTIONS' = 116, 'SHOW NAMED COLLECTIONS SECRETS' = 117, 'NAMED COLLECTION' = 118, 'NAMED COLLECTION ADMIN' = 119, 'SET DEFINER' = 120, 'TABLE ENGINE' = 121, 'SYSTEM SHUTDOWN' = 122, 'SYSTEM DROP DNS CACHE' = 123, 'SYSTEM DROP CONNECTIONS CACHE' = 124, 'SYSTEM PREWARM MARK CACHE' = 125, 'SYSTEM DROP MARK CACHE' = 126, 'SYSTEM DROP ICEBERG METADATA CACHE' = 127, 'SYSTEM DROP PARQUET METADATA CACHE' = 128, 'SYSTEM PREWARM PRIMARY INDEX CACHE' = 129, 'SYSTEM DROP PRIMARY INDEX CACHE' = 130, 'SYSTEM DROP UNCOMPRESSED CACHE' = 131, 'SYSTEM DROP VECTOR SIMILARITY INDEX CACHE' = 132, 'SYSTEM DROP TEXT INDEX TOKENS CACHE' = 133, 'SYSTEM DROP TEXT INDEX HEADER CACHE' = 134, 'SYSTEM DROP TEXT INDEX POSTINGS CACHE' = 135, 'SYSTEM DROP TEXT INDEX CACHES' = 136, 'SYSTEM DROP MMAP CACHE' = 137, 'SYSTEM DROP QUERY CONDITION CACHE' = 138, 'SYSTEM DROP QUERY CACHE' = 139, 'SYSTEM DROP COMPILED EXPRESSION CACHE' = 140, 'SYSTEM DROP FILESYSTEM CACHE' = 141, 'SYSTEM DROP DISTRIBUTED CACHE' = 142, 'SYSTEM SYNC FILESYSTEM CACHE' = 143, 'SYSTEM DROP PAGE CACHE' = 144, 'SYSTEM DROP SCHEMA CACHE' = 145, 'SYSTEM DROP FORMAT SCHEMA CACHE' = 146, 'SYSTEM DROP S3 CLIENT CACHE' = 147, 'SYSTEM DROP CACHE' = 148, 'SYSTEM RELOAD CONFIG' = 149, 'SYSTEM RELOAD USERS' = 150, 'SYSTEM RELOAD DICTIONARY' = 151, 'SYSTEM RELOAD MODEL' = 152, 'SYSTEM RELOAD FUNCTION' = 153, 'SYSTEM RELOAD EMBEDDED DICTIONARIES' = 154, 'SYSTEM RELOAD ASYNCHRONOUS METRICS' = 155, 'SYSTEM RECONNECT ZOOKEEPER' = 156, 'SYSTEM RELOAD' = 157, 'SYSTEM RESTART DISK' = 158, 'SYSTEM WAIT BLOBS CLEANUP' = 159, 'SYSTEM MERGES' = 160, 'SYSTEM TTL MERGES' = 161, 'SYSTEM FETCHES' = 162, 'SYSTEM MOVES' = 163, 'SYSTEM PULLING REPLICATION LOG' = 164, 'SYSTEM CLEANUP' = 165, 'SYSTEM VIEWS' = 166, 'SYSTEM DISTRIBUTED SENDS' = 167, 'SYSTEM REPLICATED SENDS' = 168, 'SYSTEM SENDS' = 169, 'SYSTEM REPLICATION QUEUES' = 170, 'SYSTEM VIRTUAL PARTS UPDATE' = 171, 'SYSTEM REDUCE BLOCKING PARTS' = 172, 'SYSTEM DROP REPLICA' = 173, 'SYSTEM SYNC REPLICA' = 174, 'SYSTEM REPLICA READINESS' = 175, 'SYSTEM RESTART REPLICA' = 176, 'SYSTEM RESTORE REPLICA' = 177, 'SYSTEM RESTORE DATABASE REPLICA' = 178, 'SYSTEM WAIT LOADING PARTS' = 179, 'SYSTEM SYNC DATABASE REPLICA' = 180, 'SYSTEM SYNC TRANSACTION LOG' = 181, 'SYSTEM SYNC FILE CACHE' = 182, 'SYSTEM FLUSH DISTRIBUTED' = 183, 'SYSTEM FLUSH LOGS' = 184, 'SYSTEM FLUSH ASYNC INSERT QUEUE' = 185, 'SYSTEM FLUSH OBJECT STORAGE QUEUE' = 186, 'SYSTEM FLUSH' = 187, 'SYSTEM THREAD FUZZER' = 188, 'SYSTEM UNFREEZE' = 189, 'SYSTEM UNLOCK SNAPSHOT' = 190, 'SYSTEM FAILPOINT' = 191, 'SYSTEM MEMORY' = 192, 'SYSTEM LISTEN' = 193, 'SYSTEM JEMALLOC' = 194, 'SYSTEM LOAD PRIMARY KEY' = 195, 'SYSTEM UNLOAD PRIMARY KEY' = 196, 'SYSTEM INSTRUMENT ADD' = 197, 'SYSTEM INSTRUMENT REMOVE' = 198, 'SYSTEM' = 199, 'dictGet' = 200, 'displaySecretsInShowAndSelect' = 201, 'addressToLine' = 202, 'addressToLineWithInlines' = 203, 'addressToSymbol' = 204, 'demangle' = 205, 'INTROSPECTION' = 206, 'READ' = 207, 'WRITE' = 208, 'CLUSTER' = 209, 'FILE' = 210, 'URL' = 211, 'REMOTE' = 212, 'MONGO' = 213, 'REDIS' = 214, 'MYSQL' = 215, 'POSTGRES' = 216, 'SQLITE' = 217, 'ODBC' = 218, 'JDBC' = 219, 'HDFS' = 220, 'S3' = 221, 'HIVE' = 222, 'AZURE' = 223, 'KAFKA' = 224, 'NATS' = 225, 'RABBITMQ' = 226, 'SOURCES' = 227, 'ALL' = 228, 'NONE' = 229)) — Name of a privilege which can be used in the GRANT command.
• aliases (Array(String)) — List of aliases which can be used instead of the name of the privilege.
• level (Nullable(Enum8('GLOBAL' = 0, 'DATABASE' = 1, 'TABLE' = 2, 'DICTIONARY' = 3, 'VIEW' = 4, 'COLUMN' = 5, 'NAMED_COLLECTION' = 6, 'USER_NAME' = 7, 'TABLE_ENGINE' = 8, 'DEFINER' = 9, 'SOURCE' = 10))) — Level of the privilege. GLOBAL privileges can be granted only globally (ON *.*), DATABASE privileges can be granted on a specific database (ON <database>.*) or globally (ON *.*), TABLE privileges can be granted either on a specific table or on a specific database or globally, and COLUMN privileges can be granted like TABLE privileges but also allow to specify columns.
• parent_group (Nullable(Enum16('SHOW DATABASES' = 0, 'SHOW TABLES' = 1, 'CHECK' = 2, 'SHOW COLUMNS' = 3, 'SHOW DICTIONARIES' = 4, 'SHOW' = 5, 'SHOW FILESYSTEM CACHES' = 6, 'SELECT' = 7, 'INSERT' = 8, 'ALTER UPDATE' = 9, 'ALTER DELETE' = 10, 'ALTER ADD COLUMN' = 11, 'ALTER MODIFY COLUMN' = 12, 'ALTER DROP COLUMN' = 13, 'ALTER COMMENT COLUMN' = 14, 'ALTER CLEAR COLUMN' = 15, 'ALTER RENAME COLUMN' = 16, 'ALTER MATERIALIZE COLUMN' = 17, 'ALTER COLUMN' = 18, 'ALTER MODIFY COMMENT' = 19, 'ALTER MODIFY DATABASE COMMENT' = 20, 'ALTER ORDER BY' = 21, 'ALTER SAMPLE BY' = 22, 'ALTER ADD INDEX' = 23, 'ALTER DROP INDEX' = 24, 'ALTER MATERIALIZE INDEX' = 25, 'ALTER CLEAR INDEX' = 26, 'ALTER INDEX' = 27, 'ALTER ADD STATISTICS' = 28, 'ALTER DROP STATISTICS' = 29, 'ALTER MODIFY STATISTICS' = 30, 'ALTER MATERIALIZE STATISTICS' = 31, 'ALTER STATISTICS' = 32, 'ALTER ADD PROJECTION' = 33, 'ALTER DROP PROJECTION' = 34, 'ALTER MATERIALIZE PROJECTION' = 35, 'ALTER CLEAR PROJECTION' = 36, 'ALTER PROJECTION' = 37, 'ALTER ADD CONSTRAINT' = 38, 'ALTER DROP CONSTRAINT' = 39, 'ALTER CONSTRAINT' = 40, 'ALTER TTL' = 41, 'ALTER MATERIALIZE TTL' = 42, 'ALTER REWRITE PARTS' = 43, 'ALTER SETTINGS' = 44, 'ALTER MOVE PARTITION' = 45, 'ALTER FETCH PARTITION' = 46, 'ALTER FREEZE PARTITION' = 47, 'ALTER UNLOCK SNAPSHOT' = 48, 'ALTER EXECUTE' = 49, 'ALTER DATABASE SETTINGS' = 50, 'ALTER NAMED COLLECTION' = 51, 'ALTER TABLE' = 52, 'ALTER DATABASE' = 53, 'ALTER VIEW MODIFY QUERY' = 54, 'ALTER VIEW MODIFY REFRESH' = 55, 'ALTER VIEW MODIFY SQL SECURITY' = 56, 'ALTER VIEW' = 57, 'ALTER' = 58, 'CREATE DATABASE' = 59, 'CREATE TABLE' = 60, 'CREATE VIEW' = 61, 'CREATE DICTIONARY' = 62, 'CREATE TEMPORARY TABLE' = 63, 'CREATE ARBITRARY TEMPORARY TABLE' = 64, 'CREATE TEMPORARY VIEW' = 65, 'CREATE FUNCTION' = 66, 'CREATE WORKLOAD' = 67, 'CREATE RESOURCE' = 68, 'CREATE NAMED COLLECTION' = 69, 'CREATE' = 70, 'DROP DATABASE' = 71, 'DROP TABLE' = 72, 'DROP VIEW' = 73, 'DROP DICTIONARY' = 74, 'DROP FUNCTION' = 75, 'DROP WORKLOAD' = 76, 'DROP RESOURCE' = 77, 'DROP NAMED COLLECTION' = 78, 'DROP' = 79, 'UNDROP TABLE' = 80, 'TRUNCATE' = 81, 'OPTIMIZE' = 82, 'BACKUP' = 83, 'KILL QUERY' = 84, 'KILL TRANSACTION' = 85, 'MOVE PARTITION BETWEEN SHARDS' = 86, 'CREATE USER' = 87, 'ALTER USER' = 88, 'DROP USER' = 89, 'CREATE ROLE' = 90, 'ALTER ROLE' = 91, 'DROP ROLE' = 92, 'ROLE ADMIN' = 93, 'CREATE ROW POLICY' = 94, 'ALTER ROW POLICY' = 95, 'DROP ROW POLICY' = 96, 'CREATE MASKING POLICY' = 97, 'ALTER MASKING POLICY' = 98, 'DROP MASKING POLICY' = 99, 'CREATE QUOTA' = 100, 'ALTER QUOTA' = 101, 'DROP QUOTA' = 102, 'CREATE SETTINGS PROFILE' = 103, 'ALTER SETTINGS PROFILE' = 104, 'DROP SETTINGS PROFILE' = 105, 'ALLOW SQL SECURITY NONE' = 106, 'SHOW USERS' = 107, 'SHOW ROLES' = 108, 'SHOW ROW POLICIES' = 109, 'SHOW QUOTAS' = 110, 'SHOW SETTINGS PROFILES' = 111, 'SHOW MASKING POLICIES' = 112, 'SHOW ACCESS' = 113, 'IMPERSONATE' = 114, 'ACCESS MANAGEMENT' = 115, 'SHOW NAMED COLLECTIONS' = 116, 'SHOW NAMED COLLECTIONS SECRETS' = 117, 'NAMED COLLECTION' = 118, 'NAMED COLLECTION ADMIN' = 119, 'SET DEFINER' = 120, 'TABLE ENGINE' = 121, 'SYSTEM SHUTDOWN' = 122, 'SYSTEM DROP DNS CACHE' = 123, 'SYSTEM DROP CONNECTIONS CACHE' = 124, 'SYSTEM PREWARM MARK CACHE' = 125, 'SYSTEM DROP MARK CACHE' = 126, 'SYSTEM DROP ICEBERG METADATA CACHE' = 127, 'SYSTEM DROP PARQUET METADATA CACHE' = 128, 'SYSTEM PREWARM PRIMARY INDEX CACHE' = 129, 'SYSTEM DROP PRIMARY INDEX CACHE' = 130, 'SYSTEM DROP UNCOMPRESSED CACHE' = 131, 'SYSTEM DROP VECTOR SIMILARITY INDEX CACHE' = 132, 'SYSTEM DROP TEXT INDEX TOKENS CACHE' = 133, 'SYSTEM DROP TEXT INDEX HEADER CACHE' = 134, 'SYSTEM DROP TEXT INDEX POSTINGS CACHE' = 135, 'SYSTEM DROP TEXT INDEX CACHES' = 136, 'SYSTEM DROP MMAP CACHE' = 137, 'SYSTEM DROP QUERY CONDITION CACHE' = 138, 'SYSTEM DROP QUERY CACHE' = 139, 'SYSTEM DROP COMPILED EXPRESSION CACHE' = 140, 'SYSTEM DROP FILESYSTEM CACHE' = 141, 'SYSTEM DROP DISTRIBUTED CACHE' = 142, 'SYSTEM SYNC FILESYSTEM CACHE' = 143, 'SYSTEM DROP PAGE CACHE' = 144, 'SYSTEM DROP SCHEMA CACHE' = 145, 'SYSTEM DROP FORMAT SCHEMA CACHE' = 146, 'SYSTEM DROP S3 CLIENT CACHE' = 147, 'SYSTEM DROP CACHE' = 148, 'SYSTEM RELOAD CONFIG' = 149, 'SYSTEM RELOAD USERS' = 150, 'SYSTEM RELOAD DICTIONARY' = 151, 'SYSTEM RELOAD MODEL' = 152, 'SYSTEM RELOAD FUNCTION' = 153, 'SYSTEM RELOAD EMBEDDED DICTIONARIES' = 154, 'SYSTEM RELOAD ASYNCHRONOUS METRICS' = 155, 'SYSTEM RECONNECT ZOOKEEPER' = 156, 'SYSTEM RELOAD' = 157, 'SYSTEM RESTART DISK' = 158, 'SYSTEM WAIT BLOBS CLEANUP' = 159, 'SYSTEM MERGES' = 160, 'SYSTEM TTL MERGES' = 161, 'SYSTEM FETCHES' = 162, 'SYSTEM MOVES' = 163, 'SYSTEM PULLING REPLICATION LOG' = 164, 'SYSTEM CLEANUP' = 165, 'SYSTEM VIEWS' = 166, 'SYSTEM DISTRIBUTED SENDS' = 167, 'SYSTEM REPLICATED SENDS' = 168, 'SYSTEM SENDS' = 169, 'SYSTEM REPLICATION QUEUES' = 170, 'SYSTEM VIRTUAL PARTS UPDATE' = 171, 'SYSTEM REDUCE BLOCKING PARTS' = 172, 'SYSTEM DROP REPLICA' = 173, 'SYSTEM SYNC REPLICA' = 174, 'SYSTEM REPLICA READINESS' = 175, 'SYSTEM RESTART REPLICA' = 176, 'SYSTEM RESTORE REPLICA' = 177, 'SYSTEM RESTORE DATABASE REPLICA' = 178, 'SYSTEM WAIT LOADING PARTS' = 179, 'SYSTEM SYNC DATABASE REPLICA' = 180, 'SYSTEM SYNC TRANSACTION LOG' = 181, 'SYSTEM SYNC FILE CACHE' = 182, 'SYSTEM FLUSH DISTRIBUTED' = 183, 'SYSTEM FLUSH LOGS' = 184, 'SYSTEM FLUSH ASYNC INSERT QUEUE' = 185, 'SYSTEM FLUSH OBJECT STORAGE QUEUE' = 186, 'SYSTEM FLUSH' = 187, 'SYSTEM THREAD FUZZER' = 188, 'SYSTEM UNFREEZE' = 189, 'SYSTEM UNLOCK SNAPSHOT' = 190, 'SYSTEM FAILPOINT' = 191, 'SYSTEM MEMORY' = 192, 'SYSTEM LISTEN' = 193, 'SYSTEM JEMALLOC' = 194, 'SYSTEM LOAD PRIMARY KEY' = 195, 'SYSTEM UNLOAD PRIMARY KEY' = 196, 'SYSTEM INSTRUMENT ADD' = 197, 'SYSTEM INSTRUMENT REMOVE' = 198, 'SYSTEM' = 199, 'dictGet' = 200, 'displaySecretsInShowAndSelect' = 201, 'addressToLine' = 202, 'addressToLineWithInlines' = 203, 'addressToSymbol' = 204, 'demangle' = 205, 'INTROSPECTION' = 206, 'READ' = 207, 'WRITE' = 208, 'CLUSTER' = 209, 'FILE' = 210, 'URL' = 211, 'REMOTE' = 212, 'MONGO' = 213, 'REDIS' = 214, 'MYSQL' = 215, 'POSTGRES' = 216, 'SQLITE' = 217, 'ODBC' = 218, 'JDBC' = 219, 'HDFS' = 220, 'S3' = 221, 'HIVE' = 222, 'AZURE' = 223, 'KAFKA' = 224, 'NATS' = 225, 'RABBITMQ' = 226, 'SOURCES' = 227, 'ALL' = 228, 'NONE' = 229))) — Parent privilege - if the parent privilege is granted then all its children privileges are considered as granted too.