The CREATE ROLE
statement creates a role to which privileges can be granted. Privileges can
be granted to roles, which can then be assigned to users. A user that has been assigned a role will only be
able to exercise the privileges of that role. Only users that have administrative privileges can create/drop
roles.
Syntax:
CREATE ROLE role_name
Required privileges:
Only administrative users for Ranger can use this statement.
Compatibility:
Impala makes use of any roles and privileges specified by the GRANT
and
REVOKE
statements in Hive, and Hive makes use of any roles and privileges specified by the
GRANT
and REVOKE
statements in Impala.
Cancellation: Cannot be cancelled.
HDFS permissions: This statement does not touch any HDFS files or directories, therefore no HDFS permissions are required.
Related information:
Impala Authorization, GRANT Statement (Impala 2.0 or higher only), REVOKE Statement (Impala 2.0 or higher only), DROP ROLE Statement (Impala 2.0 or higher only), SHOW Statement