Skip to content

Commit 702baf4

Browse files
Merge pull request #2617 from cwurm/fix-sql-console-roles-v2
Fix SQL console role spelling
2 parents 882ee25 + 7406ad7 commit 702baf4

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

docs/en/cloud/security/common-access-management-queries.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -46,8 +46,8 @@ Admin users are assigned the `sql_console_admin` role by default, so nothing cha
4646
This access control functionality can also be configured manually for user-level granularity. Before assigning the new `sql_console_*` roles to users, SQL console user-specific database roles matching the namespace `sql-console-role:<email>` should be created. For example:
4747

4848
```sql
49-
CREATE ROLE OR REPLACE sql_console_role_<email>;
50-
GRANT <some grants> TO sql_console_role_<email>;
49+
CREATE ROLE OR REPLACE sql-console-role:<email>;
50+
GRANT <some grants> TO sql-console-role:<email>;
5151
```
5252

5353
When a matching role is detected, it will be assigned to the user instead of the boilerplate roles. This introduces more complex access control configurations, such as creating roles like `sql_console_sa_role` and `sql_console_pm_role`, and granting them to specific users. For example:
@@ -57,12 +57,12 @@ CREATE ROLE OR REPLACE sql_console_sa_role;
5757
GRANT <whatever level of access> TO sql_console_sa_role;
5858
CREATE ROLE OR REPLACE sql_console_pm_role;
5959
GRANT <whatever level of access> TO sql_console_pm_role;
60-
CREATE ROLE OR REPLACE `sql_console_role_christoph@clickhouse.com`;
61-
CREATE ROLE OR REPLACE `sql_console_role_jake@clickhouse.com`;
62-
CREATE ROLE OR REPLACE `sql_console_role_zach@clickhouse.com`;
63-
GRANT sql_console_sa_role to `sql_console_role_christoph@clickhouse.com`;
64-
GRANT sql_console_sa_role to `sql_console_role_jake@clickhouse.com`;
65-
GRANT sql_console_pm_role to `sql_console_role_zach@clickhouse.com`;
60+
CREATE ROLE OR REPLACE `sql-console-role:christoph@clickhouse.com`;
61+
CREATE ROLE OR REPLACE `sql-console-role:jake@clickhouse.com`;
62+
CREATE ROLE OR REPLACE `sql-console-role:zach@clickhouse.com`;
63+
GRANT sql_console_sa_role to `sql-console-role:christoph@clickhouse.com`;
64+
GRANT sql_console_sa_role to `sql-console-role:jake@clickhouse.com`;
65+
GRANT sql_console_pm_role to `sql-console-role:zach@clickhouse.com`;
6666
```
6767

6868
<CommonUserRolesContent />

0 commit comments

Comments
 (0)