How to Use ClickHouse Enterprise Edition

How do I install and use ClickHouse Enterprise Edition features?

ClickHouse Enterprise Edition unlocks advanced security, replication, and observability features beyond the open-source build.

Welcome to the Galaxy, Guardian!
You'll be receiving a confirmation email

Follow us on twitter :)

Oops! Something went wrong while submitting the form.

Description

Example H2

Example H3

What does ClickHouse Enterprise Edition add?

Enterprise Edition (EE) ships proprietary extensions such as LDAP/SSO, Role-Based Access Control (RBAC), advanced compression, built-in data masking, and simplified multi-AZ replication. These features harden security and reduce operational toil for production analytics workloads.

How do I install Enterprise Edition?

Obtain a license from ClickHouse Inc., download the EE binary matching your OS, and replace the open-source server package. Preserve your config.xml and users.xml files; restart the daemon to activate EE.The license key lives in /etc/clickhouse-server/license.xml.

How do I create a replicated table?

Use the ReplicatedMergeTree engine with ZooKeeper paths. EE simplifies this by auto-creating ZooKeeper nodes when allow_experimental_auto_zookeeper = 1 is set.

Example

CREATE TABLE Orders ON CLUSTER company_cluster ( id UInt64, customer_id UInt64, order_date DateTime, total_amount Decimal(10,2) ) ENGINE = ReplicatedMergeTree('/clickhouse/tables/{shard}/orders', '{replica}') PARTITION BY toYYYYMM(order_date) ORDER BY id;

How do I enable row-level security?

EE lets you define policies that filter data per user or role.Create a policy, then attach it:

CREATE ROW POLICY customer_only ON Orders FOR SELECT USING customer_id = currentUserID(); ALTER ROW POLICY customer_only ON Orders TO ROLE analytics_role;

What is the exact syntax?

See the next section for full syntax with e-commerce tables.

When should I choose Enterprise over OSS?

Select EE when you need audited security, simplified replication across regions, built-in data obfuscation, or 24×7 vendor support.OSS is fine for internal prototyping or non-critical apps.

What are common mistakes?

Scroll down for pitfalls and quick fixes.

Why How to Use ClickHouse Enterprise Edition is important

How to Use ClickHouse Enterprise Edition Example Usage


-- Query to fetch high-value orders using Enterprise features
SELECT o.id,
       c.name,
       c.email,
       o.total_amount
FROM Orders o
JOIN Customers c ON c.id = o.customer_id
WHERE o.total_amount > 1000
  AND c.email NOT LIKE '%test%';

How to Use ClickHouse Enterprise Edition Syntax


-- Install EE (Linux, systemd)
sudo dpkg -i clickhouse-server-enterprise.deb
sudo systemctl restart clickhouse-server

-- Activate license
sudo echo "<license><key>YOUR-KEY</key></license>" > /etc/clickhouse-server/license.xml
sudo systemctl restart clickhouse-server

-- Create replicated table (Orders)
CREATE TABLE Orders ON CLUSTER company_cluster (
  id UInt64,
  customer_id UInt64,
  order_date DateTime,
  total_amount Decimal(10,2)
) ENGINE = ReplicatedMergeTree('/clickhouse/tables/{shard}/orders','{replica}')
PARTITION BY toYYYYMM(order_date)
ORDER BY id;

-- Enable data masking on Customers.email
ALTER TABLE Customers MODIFY COLUMN email String MASKING POLICY 'partial_email';

-- Define row-level security policy
CREATE ROW POLICY cust_only ON Orders FOR SELECT USING customer_id = currentUserID();
ALTER ROW POLICY cust_only ON Orders TO ROLE analyst;

-- LDAP auth snippet
<ldap_servers>
  <server host="ldap.company.com" port="636" ssl="true" />
</ldap_servers>

Common Mistakes

Ignoring license renewal. An expired key forces the server into read-only mode. Track renewal dates and automate alerts to refresh <code>license.xml</code> early.
Forgetting to align ZooKeeper paths across shards. Mismatched paths break replication. Always template paths with <code>{shard}</code> and <code>{replica}</code> consistently.