Yandex.Cloud
  • Services
  • Why Yandex.Cloud
  • Pricing
  • Documentation
  • Contact us
Get started
Yandex Managed Service for PostgreSQL
  • Getting started
  • Step-by-step instructions
    • All instructions
    • Information about existing clusters
    • Creating clusters
    • Connecting to databases
    • Stop and start the cluster
    • SQL queries in the management console
    • Changing cluster and database settings
    • Connecting to DataLens
    • Managing PostgreSQL hosts
    • Database management
    • How to manage PostgreSQL extensions
    • Managing database users
    • Granting permissions and roles
    • Managing backups
    • Deleting clusters
    • Database migration to the Cloud
    • Creating a logical replica of Amazon RDS for PostgreSQL in Managed Service for PostgreSQL
  • Solutions
    • Creating a PostgreSQL cluster for 1C
  • Concepts
    • Relationship between service resources
    • Host classes
    • Network in Yandex Managed Service for PostgreSQL
    • Quotas and limits
    • Storage types
    • Backups
    • Assigning roles
    • Replication
    • Supported clients
  • Access management
  • Pricing policy
    • Current pricing policy
    • Archive
      • Before January 1, 2019
      • From January 1 to March 1, 2019
      • From March 1, 2019 to February 1, 2020
  • API reference
    • Authentication in the API
    • gRPC
      • Overview
      • BackupService
      • ClusterService
      • DatabaseService
      • ResourcePresetService
      • UserService
      • OperationService
    • REST
      • Overview
      • Backup
        • Overview
        • get
        • list
      • Cluster
        • Overview
        • addHosts
        • backup
        • create
        • delete
        • deleteHosts
        • get
        • list
        • listBackups
        • listHosts
        • listLogs
        • listOperations
        • move
        • rescheduleMaintenance
        • restore
        • start
        • startFailover
        • stop
        • streamLogs
        • update
        • updateHosts
      • Database
        • Overview
        • create
        • delete
        • get
        • list
        • update
      • ResourcePreset
        • Overview
        • get
        • list
      • User
        • Overview
        • create
        • delete
        • get
        • grantPermission
        • list
        • revokePermission
        • update
      • Operation
        • Overview
        • get
  • Questions and answers
    • General questions
    • Questions about PostgreSQL
    • All questions on the same page
  1. Concepts
  2. Assigning roles

Assigning roles PostgreSQL

  • The mdb_admin role

Managed Service for PostgreSQL lets you create your own roles in PostgreSQL databases, but it doesn't let you access the default roles. A special mdb_admin role is provided for users who aren't DB owners, but need administrative privileges.

To assign a user role, use the Yandex.Cloud CLI or API: role assignment from a GRANT request is canceled when the next database operation is performed.

The mdb_admin role

The mdb_admin role includes the following privileges:

  • Use system role privileges:
    • pg_monitor
    • pg_signal_backend
  • Use subscriptions for logical replication (CREATE | DROP | ALTER SUBSCRIPTION).
  • Use extensions:
    • dblink
    • pg_repack
    • postgres_fdw
  • Use extension-specific functions:
    • pg_stat_kcache_reset() from the pg_stat_kcache extension.
    • pg_stat_reset() and pg_stat_statements_reset() from the pg_stat_statements extension.
Language
Careers
Privacy policy
Terms of use
© 2021 Yandex.Cloud LLC