Create a role that cannot log in directly but can hold privileges inherited by member roles.

Allow anyone to connect without a role name.

Create a database named reporting_role.

Create a role that automatically bypasses every permission check.