google postgres permissions

gistfile1.txt

postgres=> \du
List of roles
Role name                 |                         Attributes                         |                      Member of
---------------------------+------------------------------------------------------------+-----------------------------------------------------
cloudsqladmin             | Superuser, Create role, Create DB, Replication, Bypass RLS | {}
cloudsqlagent             | Create role, Create DB                                     | {cloudsqlsuperuser}
cloudsqliamserviceaccount | Cannot login                                               | {}
cloudsqliamuser           | Cannot login                                               | {}
cloudsqlimportexport      | Create role, Create DB                                     | {cloudsqlsuperuser}
cloudsqlreplica           | Replication                                                | {}
cloudsqlsuperuser         | Create role, Create DB                                     | {pg_monitor}
postgres=> SELECT * FROM pg_roles;
rolname          | rolsuper | rolinherit | rolcreaterole | rolcreatedb | rolcanlogin | rolreplication | rolconnlimit | rolpassword | rolvaliduntil | rolbypassrls | rolconfig |  oid
---------------------------+----------+------------+---------------+-------------+-------------+----------------+--------------+-------------+---------------+--------------+-----------+-------
pg_signal_backend         | f        | t          | f             | f           | f           | f              |           -1 | ********    |               | f            |           |  4200
postgres                  | f        | t          | t             | t           | t           | f              |           -1 | ********    |               | f            |           | 16389
cloudsqlagent             | f        | t          | t             | t           | t           | f              |           -1 | ********    |               | f            |           | 16386
cloudsqladmin             | t        | t          | t             | t           | t           | t              |           -1 | ********    |               | t            |           |    10
pg_read_all_stats         | f        | t          | f             | f           | f           | f              |           -1 | ********    |               | f            |           |  3375
pg_monitor                | f        | t          | f             | f           | f           | f              |           -1 | ********    |               | f            |           |  3373
cloudsqlreplica           | f        | t          | f             | f           | t           | t              |           -1 | ********    |               | f            |           | 16388
cloudsqlimportexport      | f        | t          | t             | t           | t           | f              |           -1 | ********    |               | f            |           | 16387
cloudsqliamuser           | f        | t          | f             | f           | f           | f              |           -1 | ********    |               | f            |           | 16418
cloudsqliamserviceaccount | f        | t          | f             | f           | f           | f              |           -1 | ********    |               | f            |           | 16422
pg_read_all_settings      | f        | t          | f             | f           | f           | f              |           -1 | ********    |               | f            |           |  3374
pg_stat_scan_tables       | f        | t          | f             | f           | f           | f              |           -1 | ********    |               | f            |           |  3377
cloudsqlsuperuser         | f        | t          | t             | t           | t           | f              |           -1 | ********    |               | f            |           | 16385