> ## Documentation Index
> Fetch the complete documentation index at: https://docs.firebolt.io/llms.txt
> Use this file to discover all available pages before exploring further.

> Learn about user-level permissions in Firebolt.

# User Permissions

In Firebolt, a [user](/managed-service/organizations-accounts#users) is associated with a [login](/managed-service/organization/managing-logins) or [service account](/managed-service/organization/service-accounts), which grants them access to that account. You can assign a [role](/managed-service/organizations-accounts#roles) to a user, and the role determines the specific actions they are authorized to perform within the account.

The following table outlines the privileges that can be granted for users within a particular account:

| Privilege | Description | GRANT Syntax | REVOKE Syntax |
| - | - | - | - |
| MODIFY | Grants the ability to drop the specified user. | `GRANT MODIFY ON USER <user_name> TO <role>;` | `REVOKE MODIFY ON USER <user_name> FROM <role>;` |

<Note>
  Users can modify most of their own account settings without requiring [RBAC](/security/rbac) permissions, except when altering [LOGIN](/managed-service/organization/managing-logins) configurations or a [SERVICE ACCOUNT](/managed-service/organization/service-accounts).
</Note>

## Examples of granting user permissions

### MODIFY permission

The following code example grants the role `developer_role` permission to drop the `my_user` user:

```sql theme={"theme":{"light":"css-variables","dark":"css-variables"}}
GRANT MODIFY ON USER my_user TO developer_role;
```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.