{ GRANT | REVOKE } CONNECT THROUGH proxy [WITH { ROLE { role_name [, role_name]... | ALL EXCEPT role_name [, role_name]... } | NO ROLES } ] [AUTHENTICATED USING { PASSWORD | DISTINGUISHED NAME | CERTIFICATE [TYPE 'type'] [VERSION 'version'] } ]