

 Amazon Redshift will no longer support the use of Python UDFs after June 30, 2026. We will start enforcing it in phases. For more information on the details of Python end of life and migration options, see the [ blog post ](https://aws.amazon.com/blogs/big-data/amazon-redshift-python-user-defined-functions-will-reach-end-of-support-after-june-30-2026/) that was published on June 30, 2025. 

# System permissions for RBAC
<a name="r_roles-system-privileges"></a>

Following is a list of system permissions that you can grant to or revoke from a role.


| Command | You must have permission by one of the following ways to run the command | 
| --- | --- | 
| CREATE ROLE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP ROLE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE USER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP USER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| ALTER USER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE SCHEMA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP SCHEMA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| ALTER DEFAULT PRIVILEGES |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| ACCESS CATALOG |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| ACCESS SYSTEM TABLE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE TABLE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP TABLE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| ALTER TABLE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE OR REPLACE FUNCTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE OR REPLACE EXTERNAL FUNCTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP FUNCTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE OR REPLACE PROCEDURE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP PROCEDURE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE OR REPLACE VIEW |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP VIEW |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE MODEL |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP MODEL |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE DATASHARE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| ALTER DATASHARE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP DATASHARE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CREATE LIBRARY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| DROP LIBRARY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| ANALYZE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| CANCEL |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| TRUNCATE TABLE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| VACUUM |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| IGNORE RLS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| EXPLAIN RLS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 
| EXPLAIN MASKING |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/redshift/latest/dg/r_roles-system-privileges.html)  | 