level of authorization: select, insert, update, delete, all privileges

privilege: index, resources, alteration, drop

grant <privilege list> on <relation or view > to <user list>

grant select on department to Amit, Satoshi

role

create role instructor
grant <role> to <users>

CREATE USER user1 WITH PASSWORD 'pass';
GRANT ALL PRIVILEGES ON DATABASE mydb TO user1;