v.24.11Improvement

Push External User Roles Across Cluster Nodes

Push external user roles from query originator to other nodes in cluster. Helpful when only originator has access to the external authenticator (like LDAP). #70332 (Andrey Zvonov).
Push external user roles from the query originator node to other nodes in a ClickHouse cluster.

Why it matters

This feature addresses the problem where only the query originator node has access to external authenticators, such as LDAP, by propagating external user roles across the cluster. This ensures consistent user role recognition and permission enforcement on all nodes involved in query processing.

How to use it

When running queries in a cluster, the external user roles from the query originator are automatically pushed to other nodes. No additional configuration is required if external authenticators like LDAP are used; the roles will be propagated transparently during query execution.