Access Control
Entry points for PostgreSQL access-control concepts, configuration, and administration.
Pigsty access-control documentation is organized by purpose:
- Access Control Concepts: role model, default privileges, database ACLs, and instance-isolation boundaries.
- Access Control Configuration:
pg_default_roles,pg_users,pg_default_privileges, and related parameters. - Authentication: HBA, SCRAM, certificate authentication, and credential management.
- HBA Configuration: PostgreSQL and PgBouncer rule syntax.
- User Management: create, update, and remove users in an existing cluster.
dbrole_offline provides independent read-only object privileges.
It does not restrict instance scope automatically.
To allow access only on offline instances, set role: offline explicitly on the corresponding HBA rule.
Verify the generated pg_hba.conf on both online and offline instances.
Was this page helpful?
Thanks—your feedback helps us improve this page.
What got in the way? (optional)