diff --git a/doc/src/sgml/user-manag.sgml b/doc/src/sgml/user-manag.sgml
index 9067be1d9c..fb9f382c92 100644
--- a/doc/src/sgml/user-manag.sgml
+++ b/doc/src/sgml/user-manag.sgml
@@ -236,6 +236,44 @@ CREATE USER name;
+
+
+ inheritance of privilegesroleprivilege to inherit
+
+
+ A role can explicitly be restricted at time of creation from inheriting privileges of
+ roles it is a member of (except for superusers, since those bypass all permission checks.)
+ Restricting privileges is done by the NOINHERIT option.
+ If no option is specified, INHERIT is the default. So to create a role that inherits
+ privileges, use either:
+
+CREATE ROLE name INHERIT;
+CREATE ROLE name;
+
+
+
+
+
+
+ bypass row-level securityroleprivilege to bypass
+
+
+ A role must be explicitly given permission to bypass row-level security (RLS) policy.
+ (except for superusers, since those bypass all permission checks).
+ To create such a role, use CREATE ROLE name BYPASSRLS.
+
+
+
+
+
+ connection limitroleprivilege to limit connection
+
+
+ Connection limit can specify how many concurrent connections a role can make.
+ -1 (the default) means no limit. To create such a role, use CREATE ROLE name CONNECTION LIMIT connlimit LOGIN.
+
+
+
A role's attributes can be modified after creation with