LIST SUPERUSERS
Lists all roles that have superuser privilege, including roles that have superuser status transitively through role grants.
Description
The LIST SUPERUSERS statement returns a single-column result set containing every role that currently has effective superuser access. This includes:
-
Roles created with
WITH SUPERUSER = true -
Roles that inherit superuser status transitively through role grant chains (e.g., a role granted to a superuser role)
This statement is useful for security auditing without needing to manually traverse the role hierarchy from LIST ROLES.
Permissions
Requires DESCRIBE permission on all database roles. Callers without this permission receive an UnauthorizedException.
Output
The result set contains a single column:
| Column | Description |
|---|---|
|
The name of a role with effective superuser privilege. |
Examples
List all superusers:
LIST SUPERUSERS;Example output:
role ----------- cassandra admin_role
See Also
-
CQL Security — role management and authorization