---
title: Collections
description: Use `GRANT` and `REVOKE` statements to manage collection privileges
  including SELECT, INSERT, UPSERT, DELETE, and ANALYZE operations for users and
  roles.
pubDate: 2026-08-17T09:53:44.266Z
antora:
  editUrl: https://github.com/couchbaselabs/docs-enterprise-analytics/edit/release/2.0/modules/sqlpp/pages/5_ddl_rbac_collections.adoc
  xref: xref:2.0@enterprise-analytics:sqlpp:5_ddl_rbac_collections.adoc[]
---

[Consult the llms.txt file for a full list of contents](/llms.txt)
[View original HTML](/enterprise-analytics/2.0/sqlpp/5_ddl_rbac_collections.html)

# Collections

## [](#grantrevoke-syntax-diagrams)Grant/Revoke Syntax Diagrams

**Grant Collection Diagram** 

![GRANT](_images/grantcollection.png) 

Example:

```sqlpp
GRANT SELECT, INSERT ON any COLLECTION TO USER user1, ROLE role1;
GRANT SELECT, INSERT ON any COLLECTION IN DATABASE db TO USER user1, ROLE role1;
GRANT SELECT, INSERT ON any COLLECTION IN SCOPE db.dv TO USER user1, ROLE role1;
GRANT SELECT, INSERT ON COLLECTION col1 TO USER user1, ROLE role1;
GRANT CREATE, DROP COLLECTION IN DATABASE db TO USER user1, ROLE role1;
GRANT CREATE, DROP COLLECTION IN SCOPE db.dv TO USER user1, ROLE role1;
```

**Revoke Collection Diagram** 

![REVOKE](_images/revokecollection.png) 

Example:

```sqlpp
REVOKE SELECT, INSERT ON any COLLECTION FROM USER user1, ROLE role1;
REVOKE SELECT, INSERT ON any COLLECTION IN DATABASE db FROM USER user1, ROLE role1;
REVOKE SELECT, INSERT ON any COLLECTION IN SCOPE db.dv FROM USER user1, ROLE role1;
REVOKE SELECT, INSERT ON COLLECTION col1 FROM USER user1, ROLE role1;
REVOKE CREATE, DROP COLLECTION IN DATABASE db FROM USER user1, ROLE role1;
REVOKE CREATE, DROP COLLECTION IN SCOPE db.dv FROM USER user1, ROLE role1;
```