Security and authentication

Overview of security and authentication features in ClickHouse

This section covers access control, authentication, and network security in ClickHouse.

Users and roles

Manage access control using ClickHouse’s RBAC model — users, roles, grants, and quotas.

Network ports

Reference of network ports used by ClickHouse and how to configure them.

TLS

Configure TLS for client and inter-node connections, including ACME-based certificate management.

External authenticators

Authenticate users via SSL/X.509, LDAP, HTTP, and Kerberos.