Effortless Database User Management.
Safe Enough to Delegate.
Your job as a DBA is granting privileges to groups. The helpdesk's job is assigning users into those groups. Stop wasting hours on onboarding and department-swap tickets — delegate user management safely without ever handing out SUPERUSER.
Native Everywhere
One Consistent Experience on Every Device
Engineered with Flutter for high-performance, pixel-perfect native rendering across desktop and mobile. Whether you're at your dual-monitor desk or handling an urgent permission request on your phone.
Left Pane: User Directory
Filter and select any database user (like alice, bob, or karen). Quickly create new users with the floating action button.
Role Attribute Badges
Instantly inspect role attributes at a glance: Superuser, Inherit, CreateRole, CreateDB, Login, Replication, and BypassRLS. Green means active; grey means inactive.
One-Click Group Grants
Assign or revoke role memberships with instant checkboxes. Filter between All, Assigned, and Available groups with helpful descriptions.
You Don't Care If Karen Got Hired in HR.
The Helpdesk Can Handle It.
Employees are hired and fired. They are promoted, demoted, and switch departments every week. In mid-to-large organizations, manual database user onboarding drains hours of expensive DBA time.
Design Roles & Privileges
You define the groups and schemas (e.g. hr, finance, us_sales) and grant table permissions once. You keep root and SUPERUSER firmly in your own hands.
ON hr.employees TO hr;
Assign Users via UI
Equip the helpdesk with User Manager for PostgreSQL. Using a restricted role with only CREATEROLE, they click the user and check the assigned groups in 5 seconds.
[✓] us (USA Region Data)
Zero-Wait Productivity
Karen inherits exact group permissions immediately. No back-and-forth email chains with senior engineers, no security escalations, and no forgotten orphaned accounts.
Inheritance: Active
Traditional DBA Nightmare vs. User Manager Delegation
| Task | Without User Manager | With User Manager |
|---|---|---|
| Employee Onboarding | DBA interrupted with Jira ticket to write manual CREATE ROLE and GRANT SQL | Helpdesk selects user, checks role boxes, takes 5 seconds |
| Required Operator Privilege | Dangerous SUPERUSER privileges handed to non-DBAs | Only CREATEROLE & ADMIN OPTION on designated groups |
| Attribute Visibility | Complex system catalog queries on pg_roles and pg_authid | Instant visual badges for Super, Inherit, CreateRole, Login, Repl, Bypass |
| Audit & Human Error | Typo risk in SQL scripts; forgotten permissions when someone leaves | Point-and-click accuracy, zero raw SQL typos, instant role revoking |
PostgreSQL Has No "Users" or "Groups".
Everything is a Role.
PostgreSQL simplifies authorization into a single concept: Roles. Whether an entity behaves like an interactive login user or a shared permissions group is decided by its attributes.
Login = true → "User"
Appears on the left list
When a role has CANLOGIN, human beings and application services can connect to the database. In User Manager, all login roles are cleanly presented on the left side of your screen.
Login = false → "Group"
Appears on the right roles list
When a role has NOLOGIN, it cannot log in directly. It acts as a permissions container (like hr, finance, or us) granted to users.
The 7 Role Attributes in User Manager
Click any circle badge to inspect its PostgreSQL behavior:
Inherit (I) • Active
INHERIT
Controls whether the role automatically inherits object privileges from roles of which it is a member. When active, if group hr can select hr.persons, any member inherits this access immediately.
Zero Tracking. Zero Ads.
OS-Grade Credential Protection.
Database credentials are your organization's crown jewels. User Manager is built with a strict local-first architecture: no cloud relays, no telemetry, and hardware-backed credential storage.
No Superuser Required
Never hand out SUPERUSER to staff. User Manager only requires a role with standard CREATEROLE privileges, ensuring the principle of least privilege is preserved.
OS-Level Vaults
Passwords are never written in plain text files. They are encrypted using Apple Keychain, Windows Credential Manager, Linux Secret Service / Keyring, or Android KeyStore.
Mandatory TLS / SSL
Secure client-to-server communication with enforced encryption (sslMode = require). Includes live connection security indicators directly in the status bar.
Zero Tracking & No Ads
No telemetry, no tracking pixels, no third-party SDKs, and no advertisements. The software connects only directly to the database host you specify. 100% free forever.
Download User Manager for PostgreSQL
Free forever. No account required. Download for desktop, grab it on mobile, or install from your favorite app store.
macOS
Universal binary for macOS 12 Monterey or newer. Integrated with Apple Keychain.
Windows
Native Windows app utilizing Windows Credential Manager for encrypted secrets.
Linux
Debian, Ubuntu, Fedora, Arch. Compatible with Linux Secret Service and GNOME Keyring.
iOS & iPadOS
Handle emergency role grants or offboardings directly from your iPhone or iPad with Touch ID / Face ID Keychain.
Android
Available on Google Play and direct sideload APK. Backed by Android KeyStore hardware security.
GitHub Releases
Checksums, source code, release changelogs, and direct archive downloads for all platforms.
Prefer Compiling from Source?
Built with Flutter. Fast setup on any machine with Flutter SDK installed.
# 1. Clone the repository git clone git@github.com:dbroles/postgresql.git cd postgresql # 2. Fetch packages & run test suite flutter pub get flutter test # 3. Launch on your target platform flutter run -d macos # or -d windows, -d linux
One Standard UI Across Every Major RDBMS
PostgreSQL is just the beginning. The goal of dbroles.dev is to bring the same clean, unified user-delegation experience to every database engine in your enterprise.
PostgreSQL
Full support for PostgreSQL 14, 15, 16, and 17. Role attribute badges, group inheritance, and CREATEROLE delegation live.
Microsoft SQL Server
User Manager for SQL Server. Map Logins to Database Users, configure fixed database roles (db_datareader, db_datawriter) and custom roles.
MySQL & MariaDB
User Manager for MySQL. Support for MySQL 8.0+ roles, host-based access rules ('user'@'host'), and dynamic privilege grants.
Oracle Database
User Manager for Oracle. User profiles, system privileges, multi-tenant Pluggable Database (PDB) role administration without SQL*Plus headaches.
Hi, I'm Daniel.
Building Free Tools • Sharing Knowledge Worldwide.
I built User Manager because I believe database security and least-privilege delegation shouldn't require arcane DBA knowledge or dangerous superuser sharing. I don't build software to make money — I build it so as many developers, DBAs, and IT teams as possible can use it for free, with zero tracking and zero ads.