existence of a session and its general properties such as its sessions user
and database are visible to all users. Superusers and members of the
built-in role <literal>pg_read_all_stats</literal> (see also <xref
- linkend="default-roles"/>) can see all the information about all sessions.
+ linkend="predefined-roles"/>) can see all the information about all sessions.
</para>
<table id="monitoring-stats-dynamic-views-table">
</para>
</sect1>
- <sect1 id="default-roles">
- <title>Default Roles</title>
+ <sect1 id="predefined-roles">
+ <title>Predefined Roles</title>
- <indexterm zone="default-roles">
+ <indexterm zone="predefined-roles">
<primary>role</primary>
</indexterm>
<para>
- <productname>PostgreSQL</productname> provides a set of default roles
- which provide access to certain, commonly needed, privileged capabilities
- and information. Administrators can GRANT these roles to users and/or
- other roles in their environment, providing those users with access to
- the specified capabilities and information.
+ <productname>PostgreSQL</productname> provides a set of predefined
+ roles which allow access to privileged capabilities and information.
+ Administrators can GRANT these roles to login and non-login roles,
+ providing those roles with access to the specified capabilities and
+ information.
</para>
<para>
- The default roles are described in <xref linkend="default-roles-table"/>.
- Note that the specific permissions for each of the default roles may
+ The predefined roles are described in <xref linkend="predefined-roles-table"/>.
+ Note that the specific permissions for each of the predefined roles may
change in the future as additional capabilities are added. Administrators
should monitor the release notes for changes.
</para>
- <table tocentry="1" id="default-roles-table">
- <title>Default Roles</title>
+ <table tocentry="1" id="predefined-roles-table">
+ <title>Predefined Roles</title>
<tgroup cols="2">
<thead>
<row>
<literal>pg_read_all_stats</literal> and <literal>pg_stat_scan_tables</literal>
roles are intended to allow administrators to easily configure a role for the
purpose of monitoring the database server. They grant a set of common privileges
- allowing the role to read various useful configuration settings, statistics and
- other system information normally restricted to superusers.
+ allowing the role to read configuration settings, statistics, and other
+ system information normally restricted to superusers.
</para>
<para>