Skip to main content
Grants permission or assignment to an organization role. GRANT can also be used to assign an organization role to another organization role or an identity (login or service account).

​
GRANT PRIVILEGE

Grants a permission to an organization role.
Only an org_admin or a role owner can grant a permission to an organization role. To grant a permission, you must first have that permission granted to you.

​
Syntax

​
Parameters

​
Example

Grant MODIFY on a single account The following command grants the MODIFY privilege on the account-1 account to the role account_manager, allowing it to modify the account:
Grant MODIFY on all accounts within the organization The following command grants the MODIFY privilege on all accounts in your organization to the role account_manager, allowing it to modify all the accounts:
Grant CREATE ACCOUNT on the organization The following command grants the CREATE ACCOUNT privilege on your organization to the role account_manager, allowing it to create new accounts:

​
GRANT ROLE

Grants an organization role to either an identity (login or service account) or another organization role, allowing the recipient to inherit the permissions associated with the granted role.

​
Syntax

​
Parameters

​
Example

Grant a role to another role The following command assigns the role_name role to role_name_2, allowing role_name_2 to inherit all the permissions granted to role_name:
Grant a role to a login The following command assigns the role_name role to alexs@acme.com login, allowing it to inherit all the permissions granted to role_name:
Grant a role to a service account The following command assigns the role_name role to service_account_name service account, allowing it to inherit all the permissions granted to role_name: