Understanding roles

In Chapter 3, Managing Users and Connections, you saw how to create new roles, a stereotype that can act either as a single user or a group of users. The CREATE ROLE statement was used to create the role, and you learned about the main properties a role can be associated with.

This section extends the concepts you read about in Chapter 3, Managing Users and Connections, introducing the more interesting and security-related properties of a role.

Just as a quick reminder, the synopsis for creating a new role is the following:

CREATE ROLE name [ [ WITH ] option [ ... ] ]

The name assigned to the role has to be unique within the whole cluster.

An option can be indicated in a positive form, that is, associating a property with a role, or in a negative form with the NO prefix, which removes a property from a role. Some properties are not assigned to new roles by default, so you should take your time and consult the documentation of the CREATE ROLE...