Information schema for transitive_applicable_roles

information_schema.transitive_applicable_roles view shows the following:

• All roles in the account assigned to the user, either directly or indirectly.
• All roles where the user holds granted privileges or ownership.
• All grantees of these roles, including users or other roles to whom the roles are granted.

Unlike, information_schema.applicable_roles that shows only direct grantees, information_schema.transitive_applicable_roles also shows indirect grantees. For example, if role engineer is granted to role manager and role manager is granted to user alice then user alice is a direct grantee of manager and an indirect grantee of engineer.

You can use a SELECT query to return information about each role as shown in the example below.

SELECT
  *
FROM
  information_schema.transitive_applicable_roles;

See also information_schema.applicable_roles here.

Read more about RBAC roles here.

Columns in information_schema.transitive_applicable_roles

Each row has the following columns with information about the role.

Column Name	Data Type	Description
grantee	TEXT	User or role to whom the role is granted (directly or indirectly).
role_name	TEXT	Name of the role.
is_grantable	TEXT	YES if the grantee has the admin option on the role, NO if not.
created	TIMESTAMPTZ	Creation time of the role.