51.84. pg_roles

The view pg_roles provides access to information about database roles. This is simply a publicly readable view of pg_authid that blanks out the password field.

Table 51.85. pg_roles Columns

Column Type

Description

rolnamename

Role name

rolsuperbool

Role has superuser privileges

rolinheritbool

Role automatically inherits privileges of roles it is a member of

rolcreaterolebool

Role can create more roles

rolcreatedbbool

Role can create databases

rolcanloginbool

Role can log in. That is, this role can be given as the initial session authorization identifier

rolreplicationbool

Role is a replication role. A replication role can initiate replication connections and create and drop replication slots.

rolconnlimitint4

For roles that can log in, this sets maximum number of concurrent connections this role can make. -1 means no limit.

rolprofileregprofile (references pg_profile.oid)

The OID of the role's profile

rolloginattemptsint4

Number of consecutive failed login attempts of a user. It is always 0 if FAILED_LOGIN_ATTEMPTS value of the corresponding role profile is UNLIMITED. After a successful login, rolloginattempts is reset to 0.

rolstatusint2

Status of the role: 0 for the active role, 1 the role is manually locked (see ACCOUNT LOCK in ALTER ROLE), 2 the role is locked because of inactivity (see parameter USER_INACTIVE_TIME in CREATE PROFILE), 4 the role is locked because the number of consecutive authentication failures has reached the limit (see parameter FAILED_LOGIN_ATTEMPTS in CREATE PROFILE)

rollastlogintimestamptz

The timestamp the role logged in last time

rolfirstfailedauthtimestamptz

The timestamp of the role's first authentication failure

rolpasswordtext

Not the password (always reads as ********)

rolvaliduntiltimestamptz

Password expiry time (only used for password authentication); null if no expiration

rolpasssetattimestamptz

Password set time (only used for password authentication); null if password is not set.

rolbypassrlsbool

Role bypasses every row-level security policy, see Section 5.8 for more information.

rolconfigtext[]

Role-specific defaults for run-time configuration variables

oidoid (references pg_authid.oid)

ID of role


close