GRANT perms_spec TO entity[ WITH GRANT OPTION]
REVOKE
[ GRANT OPTION FOR] // ! means only for GRANT permission, not influence any perms_spec
perms_spec FROM entity [RESTRICT|CASCADE]
perms_spec:={perm[, …] | ALL PRIVILEGES}[ ON TAB|…]
entity:=[entity_type ]user, role