Skip to content

execute_as.md

Latest commit

 

History

History
42 lines (32 loc) · 1.6 KB

execute_as.md

File metadata and controls

42 lines (32 loc) · 1.6 KB
description Documentation for EXECUTE AS Statement
sidebar_label EXECUTE AS
sidebar_position 53
slug /sql-reference/statements/execute_as
title EXECUTE AS Statement
doc_type reference

EXECUTE AS Statement

Allows to execute queries on behalf of a different user.

Syntax {#syntax}

EXECUTE AS target_user;
EXECUTE AS target_user subquery;

The first form (without subquery) sets that all the following queries in the current session will be executed on behalf of the specified target_user.

The second form (with subquery) executes only the specified subquery on behalf of the specified target_user.

In order to work both forms require server setting allow_impersonate_user to be set to 1 and the IMPERSONATE privilege to be granted. For example, the following commands

GRANT IMPERSONATE ON user1 TO user2;
GRANT IMPERSONATE ON * TO user3;

allow user user2 to execute commands EXECUTE AS user1 ... and also allow user user3 to execute commands as any user.

While impersonating another user function currentUser() returns the name of that other user, and function authenticatedUser() returns the name of the user who has been actually authenticated.

Examples {#examples}

SELECT currentUser(), authenticatedUser(); -- outputs "default    default"
CREATE USER james;
EXECUTE AS james SELECT currentUser(), authenticatedUser(); -- outputs "james    default"