imho, it sounds like what you're making is a profile that would maybe look something like this https://github.com/puppetlabs/puppetlabs-postgresql?tab=readme-ov-file#manage-users-roles-and-permissions