pg_roles

The pg_roles view provides access to information about database roles. This is a publicly readable view of pg_authid that blanks out the password field. This view explicitly exposes the OID column of the underlying table, since that is needed to do joins to other catalogs.

Column Type References Description

Column	Type	References	Description
rolname	name	—	Role name
rolsuper	boolean	—	Whether the role has superuser privileges
rolinherit	boolean	—	Whether the role automatically inherits privileges of roles it is a member of
rolcreaterole	boolean	—	Whether the role may create more roles
rolcreatedb	boolean	—	Whether the role may create databases
rolcatupdate	boolean	—	Whether the role may update system catalogs directly. Even a superuser may not do this unless this column is `true`
rolcanlogin	boolean	—	Whether the role may log in. That is, this role can be given as the initial session authorization identifier
rolreplication	boolean	—	Whether the role is a replication role. A replication role can initiate replication connections
rolconnlimit	integer	—	For roles that can log in, this sets maximum number of concurrent connections this role can make. `-1` means no limit
rolpassword	text	—	Not the password (always reads as `********`)
rolvaliduntil	timestamptz	—	Password expiry time (only used for password authentication); `NULL` if no expiration
rolconfig	text[]	—	Role-specific defaults for run-time configuration variables
rolresqueue	oid	pg_resqueue.oid	Object ID of the resource queue this role is assigned to
oid	oid	pg_authid.oid	Object ID of the role
rolcreaterextgpfd	boolean	—	Whether the role may create readable external tables that use the GPFDIST protocol
rolcreaterexthttp	boolean	—	Whether the role may create readable external tables that use the HTTP protocol
rolcreatewextgpfd	boolean	—	Whether the role may create writable external tables that use the GPFDIST protocol
rolresgroup	oid	pg_resgroup.oid	Object ID of the resource group to which this role is assigned

rolname

name

—

Role name

rolsuper

boolean

—

Whether the role has superuser privileges

rolinherit

boolean

—

Whether the role automatically inherits privileges of roles it is a member of

rolcreaterole

boolean

—

Whether the role may create more roles

rolcreatedb

boolean

—

Whether the role may create databases

rolcatupdate

boolean

—

Whether the role may update system catalogs directly. Even a superuser may not do this unless this column is true

rolcanlogin

boolean

—

Whether the role may log in. That is, this role can be given as the initial session authorization identifier

rolreplication

boolean

—

Whether the role is a replication role. A replication role can initiate replication connections

rolconnlimit

integer

—

For roles that can log in, this sets maximum number of concurrent connections this role can make. -1 means no limit

rolpassword

text

—

Not the password (always reads as ********)

rolvaliduntil

timestamptz

—

Password expiry time (only used for password authentication); NULL if no expiration

rolconfig

text[]

—

Role-specific defaults for run-time configuration variables

rolresqueue

oid

pg_resqueue.oid

Object ID of the resource queue this role is assigned to

oid

pg_authid.oid

Object ID of the role

rolcreaterextgpfd

boolean

—

Whether the role may create readable external tables that use the GPFDIST protocol

rolcreaterexthttp

boolean

—

Whether the role may create readable external tables that use the HTTP protocol

rolcreatewextgpfd

boolean

—

Whether the role may create writable external tables that use the GPFDIST protocol

rolresgroup

oid

pg_resgroup.oid

Object ID of the resource group to which this role is assigned

pg_resqueue_attributes

pg_rules