{ GRANT | REVOKE } CONNECT THROUGH proxy 
[WITH 
 { ROLE { role_name [, role_name]... | ALL EXCEPT role_name [, role_name]... }
 | NO ROLES
 }
]
[AUTHENTICATED USING 
 { PASSWORD
 | DISTINGUISHED NAME
 | CERTIFICATE [TYPE 'type'] [VERSION 'version']
 }
]