Skip to main content

CREATE ROLE

Create a role on a SingleStoreDB cluster.

Syntax

CREATE ROLE 'role_name' WITH [FAILED_LOGIN_ATTEMPTS = integer] [PASSWORD_LOCK_TIME = integer]

Arguments

FAILED_LOGON_ATTEMPTS: Together with PASSWORD_LOCK_TIME, specifies the failed login attempt lockout behavior. FAILED_LOGIN_ATTEMPTS is the number of failed attempts allowed after which the account is locked out. A value of 3 would mean that the account would be locked after three failed attempts. Default is 0 which means there is no restriction. When set to a value >=1, PASSWORD_LOCK_TIME must also be specified.

PASSWORD_LOCK_TIME: Together with FAILED_LOGIN_ATTEMPTS, specifies the failed login attempt lockout behavior. PASSWORD_LOCK_TIME is the number of seconds a locked out account must wait before reattempting to log in.

Notice

You must set both FAILED_LOGIN_ATTEMPTS and PASSWORD_LOCK_TIME to enable the lockout feature.

Notice

To change the values for FAILED_LOGIN_ATTEMPTS and PASSWORD_LOCK_TIME for a role, drop and then re-create the role.

For more information about failed login attempt lockout behavior, see SingleStoreDB User Management.

Remarks

  • This command causes implicit commits. See COMMIT for more information.

  • See the Permission Matrix for the required permission.

Example

CREATE ROLE 'role_name';
Query OK, 0 rows affected (0.06 sec)