From: Tom Lane <tgl@sss.pgh.pa.us>
To: Laurenz Albe <laurenz.albe@cybertec.at>
cc: Gambhir Singh <gambhir.singh05@gmail.com>,
        pgsql-admin@lists.postgresql.org
Subject: Re: Not able to grant role to User.
In-reply-to: <7d778cce665a121629d1eb41dde4774adf4d22d0.camel@cybertec.at>
References: 
 <CAHOGQfWA-ahoQBUoPrHB8mXyHttGPpCsUMKpngd7+5ShAOpZVA@mail.gmail.com>
 <7d778cce665a121629d1eb41dde4774adf4d22d0.camel@cybertec.at>
Comments: In-reply-to Laurenz Albe <laurenz.albe@cybertec.at>
	message dated "Mon, 30 Oct 2023 04:48:13 +0100"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <2311580.1698639066.1@sss.pgh.pa.us>
Date: Mon, 30 Oct 2023 00:11:06 -0400
Message-ID: <2311581.1698639066@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/2311581.1698639066%40sss.pgh.pa.us>
Precedence: bulk

Laurenz Albe <laurenz.albe@cybertec.at> writes:
> On Sun, 2023-10-29 at 20:40 +0530, Gambhir Singh wrote:
>> Error: Exception: must have admin option role "application_role"

> This is not a PostgreSQL error message.

It could be a sloppily transcribed version of our pre-v16 message:

        if (!have_createrole_privilege() &&
            !is_admin_of_role(grantorId, roleid))
            ereport(ERROR,
                    (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
                     errmsg("must have admin option on role \"%s\"",
                            rolename)));

If that's what it is though, any effort at reading the documentation
would have turned up the relevant point: the would-be grantor needs
to have been granted the role WITH ADMIN OPTION in order to be able
to grant it to (or revoke it from) someone else.  Or else be
superuser or someone with CREATEROLE.

			regards, tom lane