Abbreviations for ACLs

The following table is a reference for the ACL abbreviations that are used in sys.database and the output of the ybsql \ddp command. Some abbreviations are used to identify multiple ACLs on different objects.

Abbreviation ON SYSTEM ON DATABASE SCHEMAS TABLES/VIEWS COLUMNS SEQUENCES STORED PROCEDURES ROLES KEYS TRIGGERS
a (append) BULK LOAD INSERT INSERT
r (read) VIEW ROLE SELECT SELECT SELECT
w (write) ALTER ANY DATABASE ALTER ANY SCHEMA UPDATE UPDATE UPDATE
d DROP ANY DATABASE DROP ANY SCHEMA DELETE (tables)
D TRUNCATE (tables)
x REFERENCES (create a foreign-key constraint) REFERENCES
t For internal use only; triggers are not supported.
X CONTROL LDAP EXECUTE
U CONTROL ANY SESSION USAGE USAGE
C CREATE ROLE CREATE CREATE
T CREATE TEMPORARY
c CONNECT
e ENCRYPT
E DECRYPT
h HMAC (privilege to run the HMAC_KS function with a key as input to the function)
b CREATE DATABASE
p EXPLAIN QUERY EXPLAIN QUERY
q VIEW QUERY TEXT VIEW QUERY TEXT
Q TRACE QUERY TRACE QUERY
A ALTER ANY ROLE ALTER ROLE
B DROP ANY ROLE DROP ROLE
u BACKUP ANY DATABASE BACKUP
O RESTORE ANY DATABASE RESTORE
Z CONTROL CONTROL