CREATE ROW POLICY

Syntax:

clause allows creating row policies on a cluster, see Distributed DDL.

Permissive policy grants access to rows. Permissive policies which apply to the same table are combined together using the boolean OR operator. Policies are permissive by default.

Restrictive policy restricts access to rows. Restrictive policies which apply to the same table are combined together using the boolean AND operator.

In the section you can provide a mixed list of roles and users, for example, CREATE ROW POLICY ... TO accountant, [[email protected]](https://clickhouse.tech/cdn-cgi/l/email-protection).

Keyword ALL means all the ClickHouse users including current user. Keywords allow to exclude some users from the all users list, for example, CREATE ROW POLICY ... TO ALL EXCEPT accountant, [[email protected]](https://clickhouse.tech/cdn-cgi/l/email-protection)