Access Control

Entry points for PostgreSQL access-control concepts, configuration, and administration.

Reference

PGSQL

Pigsty access-control documentation is organized by purpose:

Access Control Concepts: role model, default privileges, database ACLs, and instance-isolation boundaries.
Access Control Configuration: pg_default_roles, pg_users, pg_default_privileges, and related parameters.
Authentication: HBA, SCRAM, certificate authentication, and credential management.
HBA Configuration: PostgreSQL and PgBouncer rule syntax.
User Management: create, update, and remove users in an existing cluster.

dbrole_offline provides independent read-only object privileges; it does not restrict instance scope automatically. To allow it only on offline instances, set role: offline explicitly on the corresponding HBA rule and verify the generated pg_hba.conf on both online and offline instances.