Defining PostgreSQL Roles

The following properties are applicable to a PostgreSQL Role object.

Tab

Section

Property

Description

Additional Properties

 

 

Name

Specifies the database role name

 

 

 

Type

Specifies the types of role

Role, User, Group: Specifies a database role type

 

 

Generate

Specifies whether a SQL statement for the collation is generated during forward engineering

 

General

 

 

 

 

 

 

 

 

 

General Options

 

 

 

 

 

 

 

 

 

Superuser

Specifies whether the role is a superuser. A Superuser can override all access restrictions within the database.

TRUE: Indicates whether the role is superuser

FALSE: Indicates whether the role is non-superuser

Can Create DB

Specifies the role's ability to create databases. Specifying CREATEDB allows a role to create new databases.

TRUE: Indicates that the role is allowed to create a database

FALSE: Indicates that the role is not allowed to create a database

Can Create Roles

Specifies whether a role can create, alter, drop, comment on, and change the security label for other roles

TRUE: Indicates whether the role is created

FALSE: Indicates whether the role is not created

Inherits rights from parent roles

Specifies whether a role "inherits" the privileges of roles it is a member of

TRUE: Indicates to automatically inherits the privileges of any roles it is a member of.

FALSE: Indicates that the privileges of any roles are not automatically inderited.

Can login

Specifies whether a role is allowed to log in and can be used as the initial session authorization name during client connection

TRUE: Indicates that the role is allowed to log in

FALSE: Indicates that the role is not allowed to log in

Can inititate replication

Specifies whether a role can initiate streaming replication or put the system in and out of backup mode. Use the REPLICATION attribute only on roles intended for replication.

TRUE: Indicates that the role is allowed to initiate replication

FALSE: Indicates that the role is not allowed to initiate the replication

Bypass Row-Level Security

Specifies whether a role can bypass every row-level security (RLS) policy. The default is NOBYPASSRLS. Only superuser roles or roles with BYPASSRLS permission can specify BYPASSRL.

TRUE: Specifies whether a role bypasses every row-level security (RLS) policy

Only superuser roles or roles with BYPASSRLS can specify BYPASSRLS.

FALSE: Specifies whether a role not bypasses every row-level security (RLS) policy

Connection Limit

Specifies how many concurrent connections the role can make. -1 (the default) indicates that there is no limit.

 

Valid Until

Sets a date and time after which the role's password is no longer valid. If you omit this clause, the password remains valid for all time.

 

SysID

Specifies that the SYSID clause ignores but accepts backward compatibility

 

Member Of

 

 

Automatically add the new role as a member of the specified existing roles

Name: Specifies the database role name

With Admin Option: Specifies whether the selected role has administrative privileges

Members

 

 

Automatically adds one or more specified existing roles as members to enable the SET option

Name: Specifies the database role name

With Admin Option: Specifies whether the selected role has administrative privileges

  1. (Optional) Click the Comment tab and enter any comments you want to associate with the object.
  2. (Optional) Click the UDP tab to work with user-defined properties for the object.
  3. (Optional) Click the Notes tab to view and edit user notes.
  4. (Optional) Click the Extended Notes tab to view or edit user notes.
  5. Click Close.

    The role is defined, and the PostgreSQL Role Editor closes.

For more information, refer to PostgreSQL documentation.