{ GRANT | REVOKE } CONNECT THROUGH proxy [ WITH { ROLE { role_name [, role_name ]... | ALL EXCEPT role_name [, role_name ]... } | NO ROLES } ] [ proxy_authentication ]