create role

Description

Creates a user-defined role; specifies the password expiration interval, the minimum password length, and the maximum number of failed logins allowed for a specified role at creation. You can also associate a password with the role at the time that the role is created.

Syntax

create role role_name [with passwd "password" 
	[, {passwd expiration | min passwd length | 
	max failed_logins} option_value]]

Parameters

Examples

Example 1

Creates a role named doctor_role:

create role doctor_role

Example 2

Creates a role named doctor_role with the password “physician”:

create role doctor_role with passwd "physician"

Example 3

Sets passwd expiration to 7 days. The password for the role expires at the time of day that the password was last changed after the specified period has passed (in this example, 7 days):

create role intern_role with passwd "temp244", 
passwd expiration 7

Example 4

Sets the maximum number of failed logins allowed for intern_role:

create role intern_role with passwd "temp244" 
max failed_logins 20

Example 5

Sets the minimum password length for intern_role:

create role intern_role with passwd "temp244", 
min passwd length 0

Usage

• The maximum number of roles that can be created per server session is 1024. However, 32 roles are reserved for Sybase system roles, such as sa_role and sso_role. Therefore, the maximum number of user-defined roles that can be created per server session is 992.

• If you create a role with an attached password, a user cannot activate that role by default at login. Do not create a role with an attached password if the user to whom you grant that role needs to activate the role by default at login.

Standards

ANSI SQL – Compliance level: Transact-SQL extension.

Permissions

You must be a system security officer to use create role.