In Firebolt, a schema is a logical namespace within a database that organizes tables, views, and other objects. Schema-level permissions allow roles to perform specific actions, such as accessing, modifying, or managing objects within a schema.

To perform actions on a schema or its objects, the role must also have the USAGE privilege on the schema’s parent database.

​
Schema-level privileges

PrivilegeDescriptionGRANT SyntaxREVOKE Syntax
USAGEAllows access to the schema and its objectsGRANT USAGE ON SCHEMA public IN <database_name> TO <role_name>;REVOKE USAGE ON SCHEMA public IN <database_name> FROM <role_name>;
MODIFYAllows altering the schema properties, including renaming or dropping the schema them.GRANT MODIFY ON SCHEMA public IN <database_name> TO <role_name>;REVOKE MODIFY ON SCHEMA public IN <database_name> FROM <role_name>;
CREATEAllows creating new objects, such as tables and views, within the schema.GRANT CREATE ON SCHEMA public IN <database_name> TO <role_name>;REVOKE CREATE ON SCHEMA public IN <database_name> FROM <role_name>;
DELETE ANYAllows deleting rows and partitions from all current and future tables.GRANT DELETE ANY ON SCHEMA public IN <database_name> TO <role_name>;REVOKE DELETE ANY ON SCHEMA public IN <database_name> FROM <role_name>;
INSERT ANYAllows inserting rows into all current and future tables within the schema.GRANT INSERT ANY ON SCHEMA public IN <database_name> TO <role_name>;REVOKE INSERT ANY ON SCHEMA public IN <database_name> FROM <role_name>;
UPDATE ANYAllows updating rows in all current and future tables within the schema.GRANT UPDATE ANY ON SCHEMA public IN <database_name> TO <role_name>;REVOKE UPDATE ANY ON SCHEMA public IN <database_name> FROM <role_name>;
TRUNCATE ANYAllows truncating all current and future tables within the schema.GRANT TRUNCATE ANY ON SCHEMA public IN <database_name> TO <role_name>;REVOKE TRUNCATE ANY ON SCHEMA public IN <database_name> FROM <role_name>;
VACUUM ANYAllows running the VACUUM operation on all current and future tables.GRANT VACUUM ANY ON SCHEMA public IN <database_name> TO <role_name>;REVOKE VACUUM ANY ON SCHEMA public IN <database_name> FROM <role_name>;
MODIFY ANYAllows modifying or dropping all current and future objects in the schema.GRANT MODIFY ANY ON SCHEMA public IN <database_name> TO <role_name>;REVOKE MODIFY ANY ON SCHEMA public IN <database_name> FROM <role_name>;
SELECT ANYAllows reading data from all current and future objects within the schema.GRANT SELECT ANY ON SCHEMA public IN <database_name> TO <role_name>;REVOKE SELECT ANY ON SCHEMA public IN <database_name> FROM <role_name>;
ALL [PRIVILEGES]Grants all direct privileges over the schema to a role.GRANT ALL ON SCHEMA public IN <database_name> TO <role_name>;REVOKE ALL ON SCHEMA public IN <database_name> FROM <role_name>;

​
Examples of granting schema permissions

​
USAGE permission

The following code example grants the role developer_role permission to use the specified schema.

GRANT USAGE ON SCHEMA "public" TO developer_role;

​
MODIFY permission

The following code example gives the role developer_role permission to alter properties or drop the specified schema.

GRANT MODIFY ON SCHEMA "public" TO developer_role;

​
CREATE permission

The following code example grants the role developer_role the ability to create new objects in the specified schema:

GRANT CREATE ON SCHEMA "public" TO developer_role;

​
DELETE ANY permission

The following code example gives the role developer_role permission to delete rows and partitions from all current and future tables in the specified schema:

GRANT DELETE ANY ON SCHEMA "public" TO developer_role;

​
INSERT ANY permission

The following code example grants the role developer_role permission to insert rows into all current and future tables in the specified schema:

GRANT INSERT ANY ON SCHEMA "public" TO developer_role;

​
UPDATE ANY permission

The following code example gives the role developer_role permission to update rows in all current and future tables in the specified schema:

GRANT UPDATE ANY ON SCHEMA "public" TO developer_role;

​
TRUNCATE ANY permission

The following code example grants the role developer_role the ability to truncate all current and future tables in the specified schema:

GRANT TRUNCATE ANY ON SCHEMA "public" TO developer_role;

​
VACUUM ANY permission

The following code example gives the role developer_role permission to run VACUUM operations on all current and future tables in the specified schema:

GRANT VACUUM ANY ON SCHEMA "public" TO developer_role;

​
MODIFY ANY permission

The following code example grants the role developer_role permission to modify or drop all current and future objects in the specified schema:

GRANT MODIFY ANY ON SCHEMA "public" TO developer_role;

​
SELECT ANY permission

The following code example gives the role developer_role permission to select data from all current and future objects in the specified schema:

GRANT SELECT ANY ON SCHEMA "public" TO developer_role;

​
ALL permissions

The following code example gives the role developer_role all the direct permissions over schema public:

GRANT ALL ON SCHEMA "public" TO developer_role;