PostgreSQL

Inventory database roles and login users.

Source connector

Source connector — pulls identity and access data from PostgreSQL into ComplianceScout where it is scored against your compliance frameworks and violation rules.

What ComplianceScout collects

After a successful sync, the following data is available in your ComplianceScout dashboard for violation detection and reporting.

  • All PostgreSQL roles (users and groups) with login privilege status
  • Role membership and inheritance chains
  • Superuser and CREATEDB/CREATEROLE privilege flags per role
  • Connection limit and expiry settings per role

Required credentials

These fields are collected when you add the connector in the ComplianceScout dashboard. Secrets are encrypted at rest using AES-256-GCM and are never logged.

FieldTypeRequiredNotes
HostTextRequired
PortTextOptionalDefault 5432
DatabaseTextRequired
UserTextRequired
PasswordSecretRequired

How to set up this connector

Follow these steps to gather the credentials above and connect PostgreSQL to ComplianceScout.

  1. Create a read-only PostgreSQL user: CREATE USER compliancescout WITH PASSWORD '...';

  2. Grant the necessary privileges: GRANT pg_read_all_settings TO compliancescout; GRANT SELECT ON pg_roles, pg_auth_members TO compliancescout;

  3. Ensure the ComplianceScout IP is allowed in your pg_hba.conf and firewall rules.

  4. In ComplianceScout, go to Data & Secrets → Integrations → Add Connector → PostgreSQL, enter the connection details, and click Test and Save.

Ready to connect PostgreSQL?

Start a free trial — your tenant is provisioned instantly and you can wire up this integration from the connectors page.