Adding Warehouse Users
If you have more than one person working with your Segment Warehouse, you might want to create users for your team so that each person can have a discrete login. The three steps in this section will show you how to create a user, grant usage on a schema and then grant the privileges that the user will need to interact with that schema.
1. Creating a user with the CREATE USER command
CREATE USER <name>
[IN GROUP <group>]
WITH PASSWORD <password>
[VALID UNTIL] <abstime>
The code above in [] is optional, you don’t need to group your users or give their credentials an expiration date, the code works without it. However, if you do choose to use those parameters, <abstime>
should be formatted as ‘2015-09-13’ which translates to September 13th, 2015.
For instance, you can create a user named flashthesloth
as
CREATE USER flashthesloth
WITH PASSWORD 'slow_is_beautiful'
This creates a user, you can run the following to get a list of users in your database.
SELECT * FROM pg_user
Now that we’ve confirmed that the user has been created, they already have access to the public schema that contains systems-level information about the cluster but we need to give them access to the specific schemas that they’ll be working in.
2. Grant usage on the schema
Next, GRANT USAGE on the schema to the user we just created
GRANT USAGE ON SCHEMA <schema_name> TO <user>
The above SQL command grants the user USAGE privileges on a schema. Let’s assume you want to grant flashthesloth
access to your development schema, it would look like below
GRANT USAGE ON SCHEMA development TO flashthesloth
Our new user now has usage rights on the development
schema, now we need to grant the type of SQL commands they’ll be able to run against the cluster. For the purposes of this example, we’re going to give the user read only privileges.
3. Grant select privileges
GRANT SELECT privileges so the user can query the tables
GRANT SELECT ON ALL TABLES IN SCHEMA <schema_name> TO <user>
The above SQL command grants the user SELECT rights on all tables in the chosen schema. For our flashthesloth
user and the development
schema, it would look like below.
GRANT SELECT ON ALL TABLES IN SCHEMA development TO flashthesloth
Doing these three steps will result in a new user that can query all the tables in a given schema. If you want to give access to more than one schema then you can simply repeat steps 2 and 3 for each additional schema. If you have any questions or if you’re running into any issues getting this set up, contact us.
This page was last modified: 14 Jul 2021
Need support?
Questions? Problems? Need more info? Contact Segment Support for assistance!