Skip to main content
These settings configure the ClickHouse server and are autogenerated from ClickHouse source.

allow_feature_tier

Controls if the user can change settings related to the different feature tiers.
  • 0 - Changes to any setting are allowed (experimental, private preview, beta, production).
  • 1 - Only changes to private preview, beta and production feature settings are allowed. Changes to experimental settings are rejected.
  • 2 - Only changes to beta and production feature settings are allowed. Changes to experimental or private preview settings are rejected.
  • 3 - Only changes to production settings are allowed. Changes to experimental, private preview or beta settings are rejected.
This is equivalent to setting a readonly constraint on all EXPERIMENTAL / PRIVATE PREVIEW / BETA features. A statement on a user, a role or a settings profile is rejected when it sets such a setting to a value other than the one in effect for the session running it, and also when it moves such a setting for some user even though it names no setting: granting or revoking a role that carries one, assigning a settings profile, dropping a role or a profile, or dropping an override by omission. A user defined by SQL whose own settings or whose roles’ settings hold such a value cannot log in. Settings that the server itself puts in effect through the configuration file, and users defined in it, are never rejected. The compatibility setting leaves a setting of a disabled tier at its default instead of applying the default of the previous version.
A value of 0 means that all settings can be changed.
2 previously meant “production settings only”. It now also allows beta settings, so a configuration that pinned 2 to allow production settings only must use 3.

allow_impersonate_user

Enable/disable the IMPERSONATE feature (EXECUTE AS target_user). The setting is deprecated.

allow_implicit_no_password

Forbids creating a user with no password unless ‘IDENTIFIED WITH no_password’ is explicitly specified.
  • Default: true

allow_no_password

Sets whether an insecure password type of no_password is allowed or not.
  • Default: true

allow_plaintext_password

Sets whether plaintext-password types (insecure) are allowed or not.
  • Default: true

allow_use_jemalloc_memory

Allows to use jemalloc memory.
Last modified on October 3, 2026