GRANT

Enterprise command reference.

Command Snapshot

Field	Value
Category	Security and Access Control
Mutates Data	Yes/Depends
Scope	Cluster / Object
Privilege Model	Requires administrative privilege for role, user, and privilege management.

Manages permissions and access control behavior.

GRANT { { DQL | DML | DDL | AL [,...] } | ALL [ PRIVILEGES ] }
[ON {SCHEMA | TABLE | VIEW} identifier [, ...]]
TO name [, ...]

Use schema-qualified identifiers in automation and automation pipelines.
Validate behavior in staging for cluster-impacting or governance-impacting changes.
Confirm runtime effects through system tables and metrics before and after execution.

Avoid broad wildcard grants/denials without impact review and audit traceability.

Symptom	Likely Cause	Action
Permission denied / unauthorized	Missing privilege on object or cluster scope	Re-run with required grants or elevated admin role.
Analysis/parse error	Syntax variant or object shape mismatch	Compare with canonical syntax and object definition.
Runtime failure under load	Resource limits, breaker pressure, or node state transitions	Check `sys.jobs`, `sys.operations`, `sys.checks`, and retry after mitigation.

The GRANT statement is a powerful SQL command used across various database systems to assign privileges or roles to users or roles.

GRANT { { DQL | DML | DDL | AL [,...] } | ALL [ PRIVILEGES ] }
[ON {SCHEMA | TABLE | VIEW} identifier [, ...]]
TO name [, ...]

GRANT role_name_to_grant [, ...] TO name [, ...]

In MonkDB, the GRANT statement serves two main purposes:

Granting Privileges: Assign one or more privileges (e.g., DQL, DML, DDL) on the cluster level or specific objects (schemas, tables, views) to users or roles.
Granting Roles: Assign roles to users or other roles, allowing inheritance of privileges.

Privileges: Includes operations like Data Query Language (DQL), Data Manipulation Language (DML), Data Definition Language (DDL), etc.
Object Scope: The ON clause specifies the target object (e.g., schema, table, view). If omitted, privileges are granted at the cluster level.
Roles: Allows granting one or more roles to users or other roles for privilege inheritance.

Granting DQL privileges on a table:

GRANT DQL ON TABLE monkdb.my_table TO user1;

Granting a role to another user.

However, please note that a role must have been created using CREATE ROLE prior to execution of the below example.

GRANT admin_role TO user2;