In Firebolt, a role is a group of permissions that can have privileges assigned to it. You can grant a role to another role or to users.

The following table outlines the privileges that can be granted for roles within a particular account:

PrivilegeDescriptionGRANT SyntaxREVOKE Syntax
MODIFYGrants the ability to drop the specified role.GRANT MODIFY ON ROLE <role_name> TO <role>;REVOKE MODIFY ON ROLE <role_name> FROM <role>;

​
Examples of granting role permissions

​
MODIFY permission

The following code example grants the role developer_role permission to drop the my_role role:

GRANT MODIFY ON ROLE my_role TO developer_role;