users.xml

<clickhouse>
    <profiles>
        <managed1>
            <!-- overridden parameters -->
            <custom_jdbc_config><![CDATA['a=1&!b&compress_algorithm=gzip&transactionSupport']]></custom_jdbc_config>
        </managed1>
        <managed2>
            <!-- whitelisted parameters -->
            <custom_jdbc_config><![CDATA['*&a=1&!b&compress_algorithm=gzip&transactionSupport']]></custom_jdbc_config>
        </managed2>
    </profiles>
    <users>
        <dba>
            <access_management>1</access_management>
            <profile>default</profile>
            <networks>
                <ip>::/0</ip>
            </networks>
            <password>dba</password>
            <quota>default</quota>
        </dba>
        <foo>
            <profile>default</profile>
            <networks>
                <ip>::/0</ip>
            </networks>
            <password>bar</password>
            <quota>default</quota>
        </foo>
        <oof>
            <profile>default</profile>
            <networks>
                <ip>::/0</ip>
            </networks>
            <password></password>
            <quota>default</quota>
        </oof>
        <poorman1>
            <profile>managed1</profile>
            <networks>
                <ip>::/0</ip>
            </networks>
            <password></password>
            <quota>default</quota>
        </poorman1>
        <poorman2>
            <profile>managed2</profile>
            <networks>
                <ip>::/0</ip>
            </networks>
            <password></password>
            <quota>default</quota>
        </poorman2>
        <test>
            <profile>default</profile>
            <networks incl="networks" replace="replace">
                <ip>::/0</ip>
            </networks>
            <password>123</password>
            <quota>default</quota>
            <allow_databases>
                <database>system</database>
            </allow_databases>
        </test>
        <me>
            <ssl_certificates>
                <common_name>me</common_name>
            </ssl_certificates>
        </me>
        <access_dba>
            <profile>default</profile>
            <networks incl="networks" replace="replace">
                <ip>::/0</ip>
            </networks>
            <password>123</password>
            <quota>default</quota>
            <access_management>1</access_management>
        </access_dba>
    </users>
</clickhouse>