v.22.6Improvement

Add Implicit Grants with Grant Option in ClickHouse

Official CH changelog text
Add implicit grants with grant option too. For example GRANT CREATE TABLE ON test.* TO A WITH GRANT OPTION now allows A to execute GRANT CREATE VIEW ON test.* TO B. #38017 (Vitaly Baranov).
Added support for implicit grants with the WITH GRANT OPTION, allowing users to delegate privileges they possess to others.

Why it matters

This feature enables users who have been granted permissions with the WITH GRANT OPTION to further grant those permissions to other users, facilitating more flexible and hierarchical access control management within ClickHouse.

How to use it

Use the GRANT statement with the WITH GRANT OPTION clause, for example: 

GRANT CREATE TABLE ON test. TO A WITH GRANT OPTION


This allows the user A to grant CREATE VIEW (or other applicable privileges) on test. to other users like B.

Related resources

PreviousNext