53.21. pg_roles

pg_roles

The view pg_roles provides access to information about database roles. This is simply a publicly readable view of pg_authid that blanks out the password field.

Column Type Description
rolname `name` Role name
rolsuper `bool` Role has superuser privileges
rolinherit `bool` Role automatically inherits privileges of roles it is a member of
rolcreaterole `bool` Role can create more roles
rolcreatedb `bool` Role can create databases
rolcanlogin `bool` Role can log in. That is, this role can be given as the initial session authorization identifier
rolreplication `bool` Role is a replication role. A replication role can initiate replication connections and create and drop replication slots.
rolconnlimit `int4` For roles that can log in, this sets maximum number of concurrent connections this role can make. -1 means no limit.
rolpassword `text` Not the password (always reads as `********`)
rolvaliduntil `timestamptz` Password expiry time (only used for password authentication); null if no expiration
rolbypassrls `bool` Role bypasses every row-level security policy, see Row Security Policies for more information.
rolconfig `text[]` Role-specific defaults for run-time configuration variables
oid `oid` (references pg_authid.oid) ID of role

Column Type

Description

rolname name

Role name

rolsuper bool

Role has superuser privileges

rolinherit bool

Role automatically inherits privileges of roles it is a member of

rolcreaterole bool

Role can create more roles

rolcreatedb bool

Role can create databases

rolcanlogin bool

Role can log in. That is, this role can be given as the initial session authorization identifier

rolreplication bool

Role is a replication role. A replication role can initiate replication connections and create and drop replication slots.

rolconnlimit int4

For roles that can log in, this sets maximum number of concurrent connections this role can make. -1 means no limit.

rolpassword text

Not the password (always reads as ********)

rolvaliduntil timestamptz

Password expiry time (only used for password authentication); null if no expiration

rolbypassrls bool

Role bypasses every row-level security policy, see Row Security Policies for more information.

rolconfig text[]

Role-specific defaults for run-time configuration variables

oid oid (references pg_authid.oid)

ID of role

: pg_roles Columns