The view pg_roles
provides access to
information about database roles. This is simply a publicly
readable view of
pg_authid
that blanks out the password field.
This view explicitly exposes the OID column of the underlying table, since that is needed to do joins to other catalogs.
Table 43.42. pg_roles
Columns
Name | Type | References | Description |
---|---|---|---|
rolname |
name |
Role name | |
rolsuper |
bool |
Role has superuser privileges | |
rolinherit |
bool |
Role automatically inherits privileges of roles it is a member of | |
rolcreaterole |
bool |
Role may create more roles | |
rolcreatedb |
bool |
Role may create databases | |
rolcatupdate |
bool |
Role may update system catalogs directly. (Even a superuser may not do this unless this column is true.) | |
rolcanlogin |
bool |
Role may log in. That is, this role can be given as the initial session authorization identifier | |
rolconnlimit |
int4 |
For roles that can log in, this sets maximum number of concurrent connections this role can make. -1 means no limit | |
rolpassword |
text |
Not the password (always reads as ******** ) |
|
rolvaliduntil |
timestamptz |
Password expiry time (only used for password authentication); NULL if no expiration | |
rolconfig |
text[] |
Session defaults for run-time configuration variables | |
oid |
oid |
|
ID of role |