CREATE ROLE
Create a role on a SingleStoreDB cluster.
Syntax
CREATE ROLE 'role_name' WITH [FAILED_LOGIN_ATTEMPTS = integer] [PASSWORD_LOCK_TIME = integer]
Arguments
FAILED_LOGON_ATTEMPTS: Together with PASSWORD_LOCK_TIME
, specifies the failed login attempt lockout behavior. FAILED_LOGIN_ATTEMPTS
is the number of failed attempts allowed after which the account is locked out. A value of 3 would mean that the account would be locked after three failed attempts. Default is 0 which means there is no restriction. When set to a value >=1, PASSWORD_LOCK_TIME
must also be specified.
PASSWORD_LOCK_TIME: Together with FAILED_LOGIN_ATTEMPTS
, specifies the failed login attempt lockout behavior. PASSWORD_LOCK_TIME
is the number of seconds a locked out account must wait before reattempting to log in.
Note
You must set both FAILED_LOGIN_ATTEMPTS
and PASSWORD_LOCK_TIME
to enable the lockout feature.
Note
To change the values for FAILED_LOGIN_ATTEMPTS
and PASSWORD_LOCK_TIME
for a role, drop and then re-create the role.
For more information about failed login attempt lockout behavior, see SingleStoreDB User Management.
Remarks
This command causes implicit commits. See COMMIT for more information.
See the Permission Matrix for the required permission.
Example
CREATE ROLE 'role_name'; Query OK, 0 rows affected (0.06 sec)