On 9/14/21 10:10 PM, A Z wrote:
> -In PostgreSQL, what is the difference between Roles, Groups, and
> Policies exactly? What are they each, how do they relate to one another,
> and which one(s) can be assigned to another?
>
Roles, groups and users have to do with project history more then
anything else. Prior to version 8.1 there where no roles, just users and
groups. Roles when introduced they subsumed users and groups. As David
mentioned then the convention became that a role that had login was
equivalent to a user and one that did not was a group. This is called
out in the documentation for the aliases CREATE GROUP and CREATE USER,
both of which actually point at CREATE ROLE.
Policies comes into play by allowing for more granular control over what
a role can do on a table.
--
Adrian Klaver
adrian.klaver@aklaver.com