Execute As

EXECUTE AS is wrapper syntax for a single SQL statement. It switches USER-table or STREAM-table execution to a resolved target user ID only when the authenticated actor role is allowed to target that user’s role.

EXECUTE AS

1EXECUTE AS '<user_id>' (2  <single_statement>3);

Rules

1. The wrapper must contain exactly one SQL statement
2. The target user ID must be single-quoted
3. System users may target system, DBA, service, and user accounts
4. DBA users may target DBA, service, and user accounts
5. Service users may target service and user accounts
6. Regular users may only target themselves
7. The wrapper is valid for USER and STREAM tables; shared tables use their table policy directly
8. Legacy inline ... AS USER 'name' syntax is not supported

Examples

Authorized delegated query:

1EXECUTE AS 'user_123' (2  SELECT * FROM app.messages WHERE conversation_id = 423);

Authorized delegated insert:

1EXECUTE AS 'user_123' (2  INSERT INTO app.messages (conversation_id, sender, role, content)3  VALUES (42, 'user_123', 'assistant', 'Processing complete')4);

Authorized delegated delete:

1EXECUTE AS 'user_123' (2  DELETE FROM app.messages WHERE id = 1233);

Use Cases