Proxy users have role-based privileges defined in the GRANT CONNECT THROUGH statement that creates them. See Setting Up Trusted User Applications and Proxy Users (Recommended).
For further information on the use of the SET QUERY_BAND statement for proxy user sessions, see Teradata Vantage™ - SQL Data Definition Language Detailed Topics, B035-1184.