Access Control
Entry points for PostgreSQL access-control concepts, configuration, and administration.
Pigsty access-control documentation is organized by purpose:
- Access Control Concepts: role model, default privileges, database ACLs, and instance-isolation boundaries.
- Access Control Configuration:
pg_default_roles,pg_users,pg_default_privileges, and related parameters. - Authentication: HBA, SCRAM, certificate authentication, and credential management.
- HBA Configuration: PostgreSQL and PgBouncer rule syntax.
- User Management: create, update, and remove users in an existing cluster.
dbrole_offline provides independent read-only object privileges; it does not restrict instance scope automatically. To allow it only on offline instances, set role: offline explicitly on the corresponding HBA rule and verify the generated pg_hba.conf on both online and offline instances.
Feedback
Was this page helpful?
Thanks for the feedback! Please let us know how we can improve.
Sorry to hear that. Please let us know how we can improve.