User management

Nik and Michael discuss user management in Postgres — how roles work, making administration easier, setting passwords, and avoiding them being logged.

Here are some links to things they mentioned:
• Roles postgresql.org/docs/current/user-manag.html
• Privileges postgresql.org/docs/current/ddl-priv.html
• ALTER DEFAULT PRIVILEGES postgresql.org/docs/current/sql-alterdefaultpr…
• GRANT postgresql.org/docs/current/sql-grant.html
• REASSIGN OWNED postgresql.org/docs/current/sql-reassign-owned…
• ALTER ROLE (including SET) postgresql.org/docs/current/sql-alterrole.html
• CREATE ROLE postgresql.org/docs/current/sql-createrole.html
• Have I Been Pwned haveibeenpwned.com
• Pwned Passwords API haveibeenpwned.com/API/v3#PwnedPasswords
• Crunchy Data PostgreSQL Security Technical Implementation Guide (STIG) crunchydata.com/blog/announcing-the-crunchy-da…
• Our episode on auditing postgres.fm/episodes/auditing

~~~
What did you like or not like? What should we discuss next time? Let us know via a YouTube comment, on social media, (postgres.fm/people) or by commenting on our Google doc (docs.google.com/document/d/1PNGSn_d0A7gTR4C0p6…)!

~~~
Postgres FM is produced by:
• Michael Christofides, founder of pgMustard (pgmustard.com)
• Nikolay Samokhvalov, founder of Postgres.ai (postgres.ai)

With credit to:
• Jessie Draws for the elephant artwork