CREATE [ OR REPLACE ] DATA ROLE [ IF NOT EXISTS ] data_role_name { external_role_clause | local_role_clause }