{ GRANT | REVOKE }
CONNECT THROUGH proxy
[ WITH { ROLE { role_name
                [, role_name ]...
              | ALL EXCEPT role_name
                           [, role_name ]...
              }
       | NO ROLES
       }
]
[ proxy_authentication ]