User Permissions

Learn about user-level permissions in Firebolt.

In Firebolt, a user is associated with a login or service account, which grants them access to that account. You can assign a role to a user, and the role determines the specific actions they are authorized to perform within the account.

The following table outlines the privileges that can be granted for users within a particular account:

Privilege	Description	GRANT Syntax	REVOKE Syntax
MODIFY	Grants the ability to drop the specified user.	GRANT MODIFY ON USER <user_name> TO <role>;	REVOKE MODIFY ON USER <user_name> FROM <role>;

Users can modify most of their own account settings without requiring RBAC permissions, except when altering LOGIN configurations or a SERVICE ACCOUNT.

Examples of granting user permissions

MODIFY permission

The following code example grants the role developer_role permission to drop the my_user user:

GRANT MODIFY ON USER my_user TO developer_role;