For AI agents: the complete documentation index is at llms.txt. Every page is also available as markdown by appending .md to its URL, or by sending an Accept: text/markdown request header.

ALTER GROUP WITH EXTERNAL ALIAS reference

Enterprise:

RBAC provides fine-grained database permissions management.

Learn moreFree trial

ALTER GROUP ... WITH EXTERNAL ALIAS maps an external OIDC or LDAP group to a QuestDB group, so members of the external group inherit its permissions on login.

Syntax​

ALTER GROUP groupName WITH EXTERNAL ALIAS externalAlias;

Description​

Adding an alias requires the ADD EXTERNAL ALIAS permission. Quote the alias when it contains commas, spaces, or =, as LDAP distinguished names do.

For the external group mapping flow, see the OpenID Connect (OIDC) integration guide. To create a group and its alias in one statement, use CREATE GROUP ... WITH EXTERNAL ALIAS.

note

This is identity mapping: it decides which QuestDB group an external identity lands in. It is unrelated to SET RESOURCE GROUP, which decides how much of the instance that group's queries may consume.

Examples​

ALTER GROUP analysts WITH EXTERNAL ALIAS 'CN=Analysts,OU=Users,DC=example,DC=com';

The alias can be verified with SHOW GROUPS, which reports it in the external_alias column.

See also​