[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-22。"],[[["\u003cp\u003eAlloyDB Omni utilizes standard PostgreSQL roles, which can function as database users, groups, or both.\u003c/p\u003e\n"],["\u003cp\u003eAlloyDB Omni introduces predefined roles such as \u003ccode\u003ealloydbadmin\u003c/code\u003e, which has \u003ccode\u003eSUPERUSER\u003c/code\u003e privileges, and \u003ccode\u003ealloydbmetadata\u003c/code\u003e, which has no default privileges.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003ealloydbadmin\u003c/code\u003e role, having extensive permissions, is intended for internal AlloyDB Omni operations and should not be used by end-users.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003ealloydbmetadata\u003c/code\u003e is also an internally used role with restricted privileges, not meant for general user accounts.\u003c/p\u003e\n"],["\u003cp\u003eAlloyDB Omni reserves several role names for future use, all with \u003ccode\u003eNOLOGIN\u003c/code\u003e privileges.\u003c/p\u003e\n"]]],[],null,["# AlloyDB Omni user role overview\n\nSelect a documentation version: 16.3.0keyboard_arrow_down\n\n- [Current (16.8.0)](/alloydb/omni/current/docs/database-users/overview)\n- [16.8.0](/alloydb/omni/16.8.0/docs/database-users/overview)\n- [16.3.0](/alloydb/omni/16.3.0/docs/database-users/overview)\n- [15.12.0](/alloydb/omni/15.12.0/docs/database-users/overview)\n- [15.7.1](/alloydb/omni/15.7.1/docs/database-users/overview)\n- [15.7.0](/alloydb/omni/15.7.0/docs/database-users/overview)\n\n\u003cbr /\u003e\n\nThis page describes how AlloyDB Omni on a VM works with PostgreSQL roles. This page assumes that you are familiar with PostgreSQL.\n\n\u003cbr /\u003e\n\nAn AlloyDB Omni database uses [the standard PostgreSQL concept of roles](https://www.postgresql.org/docs/current/database-roles.html). A role can act as a database user, a group of users, or both.\n\nA *user role* has the `LOGIN` privilege that lets users sign in to the AlloyDB Omni system. A *group role* has member roles with various privileges, which you can grant to or revoke from all members at once.\n\nAlloyDB Omni predefined PostgreSQL roles\n----------------------------------------\n\nPostgreSQL has a set of [predefined roles](https://www.postgresql.org/docs/current/predefined-roles.html)\nwith various privileges. AlloyDB Omni adds several user and group\nroles to this set of PostgreSQL's predefined roles.\n\nThe following table lists the PostgreSQL roles that AlloyDB Omni\npredefines:\n\nIn addition, AlloyDB Omni reserves the following role names that are unused but may be used in the future.\n\n### The alloydbadmin user role\n\nThe `alloydbadmin` role is a predefined role that sets up\nthe database system and performs other superuser tasks. This role has the following privileges:\n\n- Create extensions that require superuser privileges\n- Create event triggers\n- Create replication users\n- Create replication publications and subscriptions\n\nThis role is only used by AlloyDB Omni internal tools and shouldn't be used by users.\n\n### The alloydbmetadata role\n\nThe `alloydbmetadata` role is a predefined role with fewer privileges, also used by AlloyDB Omni internally. Similar to `alloydbadmin`, this role shouldn't be used by other users.\n\nWhat's next\n-----------\n\n- [Manage AlloyDB Omni roles](/alloydb/omni/16.3.0/docs/database-users/about)"]]
