> ## Documentation Index
> Fetch the complete documentation index at: https://private-7c7dfe99-fix-nav-issues.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.
# Managed Postgres RBAC
> Learn about role-based access control (RBAC) in ClickHouse Managed Postgres
export const Image = ({img, alt, size}) => {
return
;
};
export const galaxyOnClick = eventName => () => {
try {
if (typeof window !== "undefined" && window.galaxy && eventName) {
window.galaxy.track(eventName, {
interaction: "click"
});
}
} catch (e) {}
};
export const BetaBadge = ({link, galaxyTrack, galaxyEvent}) => {
if (link) {
return
Beta
;
}
return ;
};
ClickHouse Cloud supports role-based access control (RBAC) for Managed Postgres services. You can create custom roles with specific permissions and assign them to organization members to control who can view or manage your Postgres services.
Available permissions
Managed Postgres currently supports two permissions:
| Permission | Description |
| ---------------------------- | ------------------------------------------------------------------- |
| **View Postgres services** | Allows a user to see the Postgres service and its details. |
| **Manage Postgres services** | Allows a user to modify, scale, and configure the Postgres service. |
Creating a new Postgres service requires the existing **Organization manage** permission. The permissions above apply only to existing services.
More granular permissions will be available in a future release.
Creating a custom role
1. Click your organization name in the left sidebar and select **Users and roles**.
2. Switch to the **Roles** tab and click **Create role**.
3. Enter a name for the role, then click **+ Allow** and select **Postgres Service** from the entity list.
4. Choose the Postgres service to scope the role to, then select the permissions to grant.
5. Click **Create role** to save.
Assigning a role
Once the role is created, assign it to users from the **Users** tab on the same **Users and roles** page. A user can have multiple roles, and roles can be combined to build the exact access profile you need.