Introduction to PostgreSQL Superuser
PostgreSQL provides the facility to create different types of user roles like user and superuser. The superuser is a system account with high-level privileges beyond other users. Superuser has direct access to any data or user. There is no need to take permission to access data. Superuser is useful to control management related functions, but it is necessary to control them; otherwise, it can do some changes in data. When we consider security issues, the superuser is not a good option because it controls all access controls. When we create a user at that time, we assign a different role to the user.
Syntax
alter user user name with super;
Explanation
In the above syntax, we use alter user statements to alter the role of the user. For example, where username is a specified user name, with is the keyword, super is the role we want to assign.
How does superuser work in PostgreSql?
- We must install PostgreSql in your system.
- We required basic knowledge about PostgreSql.
- We need basic knowledge about user management that means how it is used.
PostgreSql provides a facility to manage database access permission using the different privileges of the user. It bypasses all permission as follows.
- create db
In creating a db means the user is able to create a database.
- create a role
In create roles, the user assigns roles to other users by using this privilege.
- login
In login, PostgreSQL provides a facility to do user login.
- Password
With the help of a password, we secure user data as well as the user environment.
PostgreSQL provides some Meta commands to users to perform different activities on the psql terminal as follows.
How to check the current user through PSQL?
\du
Suppose we need to check the existing user role at that time we use the above command. Then, illustrate the end result of the above declaration by using the use of the following snapshot.
Explanation
Postgres is a user role or name in the above snapshot, and it is by default a superuser.
Let’s see how we can create a superuser using the above syntax in pgAdmin.
Example
Create user john with superuser;
Explanation
In the above example, we use to create a user statement to create a user, where John is the specified user name, with is the keyword and superuser is the user’s role, which we want to assign. Next, illustrate the end result of the above declaration by using the use of the following snapshot.
Let’s see how we can create a superuser with different privilege
Syntax
create role role name with superuser option;
Explanation
In the above syntax, we use the create role statement to create a user. The create a role statement is equivalent to create a user. Where role name is specified user name, where superuser is the role of the user which we want to assign, and the option is used to assign different privileges to the user.
Example
CREATE ROLE john WITH LOGIN SUPERUSER
CREATEDB CREATEROLE INHERIT NOREPLICATION
CONNECTION LIMIT -10 VALID UNTIL '2020-08-08T22:28:08-07:00'
PASSWORD '123';
Explanation
In the above example, we use a create role statement to create a user. In this example, we created a john user with it who has a different privilege. First, we assign a superuser role to john users; we also give permission to create a database, login and create a role, etc. We also provide a connection limit and password with a valid date of the password. Illustrate the end result of the above declaration by using the use of the following snapshot.
Suppose we have an existing user, and we want to change the user’s role, which means we assign the superuser roles to specific users; at that time, we use the following syntax. Let’s see how we can assign superuser roles to exist users using the following syntax.
Syntax
alter user user name with superuser;
Explanation
In the above syntax, we use alter user statements to alter the role of existing users, where username is used to a specific user name, with is a keyword and superuser is the role of the user which we want to assign.
Example
alter user Sam with superuser;
Example
In the above example, Sam is an existing user and suppose we need to change the role of Sam user at that time we use the above statement where we use alter user statements, which is a keyword, and superuser is the role of the user. Next, illustrate the end result of the above declaration by using the use of the following snapshot.
Revoke superuser role in PostgreSQL
In this method, we revoke the user role. For example, suppose we need to revoke the superuser role at that time, we use the following syntax.
Syntax
alter user user name nosuperuser;
Explanation
In the above syntax, we alter the user statement to revoke the superuser role where the user name is specified user name, and nosuperuser is used to revoke the role.
Example
alter user sam with nosuperuser;
Explanation
In the above example, we revoke the superuser role of the same user. Next, illustrate the end result of the above declaration by using the use of the following snapshot.
Drop superuser
Due to security purposes, suppose we need to drop the superuser at that time, we use the following syntax.
Syntax
drop user user name;
Explanation
In the above syntax, we use drop user statements to delete the superuser where user name means specified user name which we want to delete.
Example
drop user Sam;
Explanation
In the above example, Sam is a superuser. Where we use drop user statements to delete Sam users. Illustrate the end result of the above declaration by using the use of the following snapshot.
Conclusion
We hope from this article you have understood about the PostgreSQL superuser role of users. Superuser has all access permissions. Therefore, considering a security point of view superuser is not a good option. We have learned the basic syntax of alter superuser, create a superuser, and delete superuser from the above article. We have also learned how we can implement them in PostgreSQL with different examples of each type. Finally, we have learned how we can handle superuser in PostgreSQL on the server from this article.
Recommended Articles
This is a guide to PostgreSQL Superuser. Here we discuss How does superuser work in PostgreSql and How to check the current user through PSQL. You may also look at the following articles to learn more –
