PostgreSQL Permissions helps review permission and access information for a monitored PostgreSQL server. Use it to understand whether Mini DBA has enough access and to support security review.
Workflow
- Open Permissions.
- Review roles, grants, or permission rows shown by the page.
- If monitoring pages are missing data, verify the Mini DBA database login can read required PostgreSQL views.
- Apply access changes through your normal security process.
How To Review PostgreSQL Permissions
The Permissions page helps confirm whether the monitored PostgreSQL account can see the system views and metadata needed by Mini DBA. Use it during initial setup, after a permission change, or when a monitoring page appears incomplete.
Start with the monitoring user described in Connect To PostgreSQL. That guide includes SQL examples for creating a role and granting the permissions required for monitoring. If query, wait, database, log, or extension data is missing, compare the feature with the grants assigned to the monitoring role.
Use least privilege wherever possible. A broad superuser account may make setup easier, but it is usually not appropriate for production monitoring. Grant the minimum access that supports the metrics your organization needs, and make changes through your normal security approval process.
PostgreSQL Permissions FAQ
Does Mini DBA need a PostgreSQL superuser?
No for many monitoring scenarios. Some features may need additional grants or extensions, but a dedicated monitoring role is preferred.
Why does one PostgreSQL server show more data than another?
Version, extensions, configuration, cloud provider restrictions, and role grants can all affect visibility.
Where are the setup SQL examples?
See Connect To PostgreSQL for role creation, grants, and host OS login notes.
Next Steps After Permission Review
If permissions look incomplete, compare the missing Mini DBA page with the grants in the PostgreSQL connection guide. Add only the permissions required for the metrics you need, then refresh collection and verify the affected page again. Keep a record of the monitoring role grants so future audits can distinguish monitoring access from application access.