42.39. pg_roles

The view pg_roles provides access to information about database roles. This is simply a publicly readable view of pg_authid that blanks out the password field.

This view explicitly exposes the OID column of the underlying table, since that is needed to do joins to other catalogs.

Table 42-39. pg_roles Columns

NameTypeReferencesDescription
rolnamename Role name
rolsuperbool Role has superuser privileges
rolinheritbool Role automatically inherits privileges of roles it is a member of
rolcreaterolebool Role may create more roles
rolcreatedbbool Role may create databases
rolcatupdatebool  Role may update system catalogs directly. (Even a superuser may not do this unless this column is true.)
rolcanloginbool  Role may log in, that is, this role can be given as the initial session authorization identifier.
rolconnlimitint4  For roles that can log in, this sets maximum number of concurrent connections this role can make. -1 means no limit.
rolpasswordtext Not the password (always reads as ********)
rolvaliduntiltimestamptz Password expiry time (only used for password authentication); NULL if no expiration
rolconfigtext[] Session defaults for run-time configuration variables
oidoidpg_authid.oidID of role