Amazon Redshift will no longer support the creation of new Python UDFs starting Patch 198. Existing Python UDFs will continue to function until June 30, 2026. For more information, see the [ blog post ](https://aws.amazon.com/blogs/big-data/amazon-redshift-python-user-defined-functions-will-reach-end-of-support-after-june-30-2026/). 

# PG\$1GET\$1GRANTEE\$1BY\$1IAM\$1ROLE
PG\$1GET\$1GRANTEE\$1BY\$1IAM\$1ROLE

Returns all users and groups granted a specified IAM role.

## Syntax
Syntax

```
pg_get_grantee_by_iam_role('iam_role_arn')
```

## Arguments
Arguments

 *iam\$1role\$1arn*   
The IAM role for which to return the users and groups that have been granted this role.

## Return type
Return type

VARCHAR 

## Usage notes
Usage Notes

The PG\$1GET\$1GRANTEE\$1BY\$1IAM\$1ROLE function returns one row for each user or group. Each row contains the grantee name, grantee type, and granted privilege. The possible values for the grantee type are `p` for public, `u` for user, and `g` for group. 

You must be a superuser to use this function.

## Example
Example

The following example indicates that the IAM role `Redshift-S3-Write` is granted to `group1` and `reg_user1`. Users in `group_1` can specify the role only for COPY operations, and user `reg_user1` can specify the role only to perform UNLOAD operations.

```
select pg_get_grantee_by_iam_role('arn:aws:iam::123456789012:role/Redshift-S3-Write');
```

```
  pg_get_grantee_by_iam_role
-----------------------------
 (group_1,g,COPY)
 (reg_user1,u,UNLOAD)
```

The following example of the PG\$1GET\$1GRANTEE\$1BY\$1IAM\$1ROLE function formats the result as a table.

```
select grantee, grantee_type, cmd_type FROM pg_get_grantee_by_iam_role('arn:aws:iam::123456789012:role/Redshift-S3-Write') res_grantee(grantee text, grantee_type text, cmd_type text) ORDER BY 1,2,3;
```

```
  grantee  | grantee_type | cmd_type
-----------+--------------+----------
 group_1   | g            | COPY
 reg_user1 | u            | UNLOAD
```