{ CREATE | REPLACE } AUTHORIZATION [ database_name. | user_name. ] authorization_name
[ AS [ DEFINER | INVOKER ] [ TRUSTED ] ]
{ user-password_auth | extended_auth }
[;]
- user-password_auth
[ DOMAIN domain_name ] USER 'user_name' PASSWORD 'password' [ SESSION_TOKEN 'session_token_value' ]
- extended_auth
USING AUTHSERVICETYPE '{ ASSUME_ROLE assume_role_auth }'- assume_role_auth
ROLENAME 'resource_name' EXTERNALID 'external_id' [ DURATION_SECONDS 'duration_seconds_value' ]