User, role, & privilege commands¶ User, role, and privilege commands enable you to manage your users, roles, and privileges. User management¶ CREATE USER ALTER USER DROP USER DESCRIBE USER SHOW USERS Programmatic access token management¶ ALTER USER … ADD PROGRAMMATIC ACCESS TOKEN (PAT) ALTER USER … MODIFY PROGRAMMATIC ACCESS TOKEN (PAT) ALTER USER … ROTATE PROGRAMMATIC ACCESS TOKEN (PAT) ALTER USER … REMOVE PROGRAMMATIC ACCESS TOKEN (PAT) SHOW USER PROGRAMMATIC ACCESS TOKENS Workload identity federation management¶ SHOW USER WORKLOAD IDENTITY AUTHENTICATION METHODS Organization user management¶ CREATE ORGANIZATION USER ALTER ORGANIZATION USER DROP ORGANIZATION USER SHOW ORGANIZATION USERS Organization user group management¶ CREATE ORGANIZATION USER GROUP ALTER ORGANIZATION USER GROUP DROP ORGANIZATION USER GROUP SHOW ORGANIZATION USER GROUPS Database role management¶ CREATE DATABASE ROLE ALTER DATABASE ROLE DROP DATABASE ROLE SHOW DATABASE ROLES GRANT DATABASE ROLE REVOKE DATABASE ROLE GRANT DATABASE ROLE … TO SHARE REVOKE DATABASE ROLE … FROM SHARE Account-level role management¶ CREATE ROLE ALTER ROLE DROP ROLE SHOW ROLES USE ROLE USE SECONDARY ROLES GRANT ROLE REVOKE ROLE Privilege management¶ GRANT <privileges> … TO APPLICATION REVOKE <privileges> … FROM APPLICATION GRANT <privileges> … TO APPLICATION ROLE REVOKE <privileges> … FROM APPLICATION ROLE GRANT <privileges> … TO ROLE REVOKE <privileges> … FROM ROLE GRANT <privileges> … TO USER REVOKE <privileges> … FROM USER GRANT <privilege> … TO SHARE REVOKE <privilege> … FROM SHARE GRANT OWNERSHIP GRANT CALLER REVOKE CALLER SHOW CALLER GRANTS SHOW GRANTS