# ClickHouse + Lutril: setup guide

> Lutril connects to ClickHouse Cloud with an API key pair and reads your organization members with every role they hold, system and custom alike. Access is time boxed from both ends: a grant invites somebody or adds one role to a membership they already have, and the deadline removes exactly that role or the membership. The role picker is live, so the custom roles your organization defined appear alongside the built in ones instead of being hidden behind a fixed list.

Source: https://www.lutril.com/fr/integrations/clickhouse
Category: SaaS
Auth: api_key
Last verified: 2026-11-09

---

## Setup

1. [object Object]
2. [object Object]
3. Copy the key ID and the key secret straight away. ClickHouse shows the secret once.
4. Find your organization ID. It is the UUID in your ClickHouse Cloud organization address.
5. In Lutril, connect ClickHouse and paste the key ID, the key secret and the organization ID.
6. [object Object]
7. A grant adds exactly one role and keeps every other role the person holds. The deadline re-reads the membership and removes only the role the grant added, so a role somebody else granted inside the window survives and a role the person held before Lutril saw them is never taken away.
8. [object Object]
9. Removing somebody takes them out of the organization and leaves their ClickHouse account alone, so the next grant invites them back.

## Access requested

- control-plane:organization:view (list the organization members and its roles)
- control-plane:organization:manage (invite, add a role for a time boxed grant, remove it again, and remove a membership)

## References

- [ClickHouse documentation](https://clickhouse.com/docs/products/cloud/api-reference/user-management/list-organization-members)
- [ClickHouse console](https://console.clickhouse.cloud/)
- [List organization members](https://clickhouse.com/docs/products/cloud/api-reference/user-management/list-organization-members)
- [Update an organization member](https://clickhouse.com/docs/products/cloud/api-reference/user-management/update-organization-member)
- [Create an invitation](https://clickhouse.com/docs/products/cloud/api-reference/user-management/create-an-invitation)
- [List all available roles](https://clickhouse.com/docs/products/cloud/api-reference/role-management/list-all-available-roles-for-an-organization)
- [Managing cloud users](https://clickhouse.com/docs/cloud/security/inviting-new-users)