Access Control

Roles, grants, revocations, and default privileges.
PageDescription
RolesCluster-level ROLE declarations
GrantsGRANTS and REVOKES blocks — the additive model
Default PrivilegesDEFAULT PRIVILEGES FOR ROLE
Roles

Cluster-level ROLE declarations with login, password, connection limits, and membership.

Grants

GRANTS and REVOKES blocks — the additive model: DPG only emits GRANT, never auto-revokes.

Default Privileges

DEFAULT PRIVILEGES FOR ROLE — automatically grant privileges on future objects created by a role.