Michael Glaesemann <grzm@seespotcode.net> writes:
> For the roles (users) on your system, yes. Though you should have at
> least one superuser who has CREATEROLE, otherwise you couldn't create
> new roles.
A user with the superuser flag set can do anything; the states of the
other flags are meaningless for him.
regards, tom lane