# Roles

__*TiDB role*__

+ A role is a collection of privilege:
  + Ability to be granted privilege just like users
  + Ability to include other privilege
+ Roles are similar to users:
  + are all stored in the mysql.users table
  + Role names, like user names, include names and host

-------------------------------------------------------------
Roles are collections of privilege that make it easy to add, remove, and manage user privileges centrally. It has the following characteristics: 1. Be able to be granted privilege like users, 2. Ability to include other privilege.

There are places where roles are similar to users: 1. are stored in the mysql.users table. 2. A role name, like a user name, includes a name and host.

Roles are implement in a similar way to users, except that you can't sign in as a role. You can even provide a name and host when you create a role, just like when you create a user. However, unlike users, role names cannot be empty, and unlike users, the% character in the host name does not have any wildcard attributes.