Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kpzBR-0003nU-J7 for pgsql-admin@arkaria.postgresql.org; Thu, 17 Dec 2020 19:43:29 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kpzBQ-0006aD-AM for pgsql-admin@arkaria.postgresql.org; Thu, 17 Dec 2020 19:43:28 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kpzBQ-0006Zz-0a for pgsql-admin@lists.postgresql.org; Thu, 17 Dec 2020 19:43:28 +0000 Received: from mail-qk1-x729.google.com ([2607:f8b0:4864:20::729]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1kpzBN-00014t-Nx for pgsql-admin@lists.postgresql.org; Thu, 17 Dec 2020 19:43:26 +0000 Received: by mail-qk1-x729.google.com with SMTP id n142so27567169qkn.2 for ; Thu, 17 Dec 2020 11:43:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=vQkvktqUDwMIlVbf+MCTTQp8cWRTvXoes5cYOj3vLSI=; b=RCPgX5bpm0CtFpjMpEAn0RUmTobrvnw8uNQ54vhloe0pjflNifFY+wwKqFUUmz7t4A J6hMbXhrIt2eG2onJo9+ejcGlo0MbKctePesQFiq64BeZkG+kjWB+cgT/8miz/z83gll NWjdjF3/r52oIAfQaK7pOfpoN996X8+F4WBQzJUna+5JlLzndUrK2y2gLc2hghfwzX23 vpUWtr1L/pTX6Uh1WsubBhzTg1sPjPcXnDOBZzGV8uZ/kvJFzZdXJvB2hphef+ReIi7J x1D/l0ChvOzr+sBSPfKsYvNv9+Fg0aeIQKA77XdKIhRt0YfwuOu29bF2/kbCpODzEiIJ F4rQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=vQkvktqUDwMIlVbf+MCTTQp8cWRTvXoes5cYOj3vLSI=; b=RFGH64kFTBtmhznykHj8CR5/3tFXknHb9ji23b4Acl7bUQDUbZ69qkuMb0o9Y5Rsho DSwuEQhcB3gGD4V+qHmVSrx8KnlQkXn0mO6ucFGzltrAQzTL9CYXILV0p90avtgt73o2 ay1aHN2BSHvj0dYxLoXMDjr/7CanZwll7RT2Vy7H4xh+qAx1G2kn+jJWiXvgfKPdk4uS jHTlZ4rH70ds1vmYsFby7S7eZY1tYvaewWFyluxL4RCBXPvjR+11RwatTa54GSbpkBjK 4vSn6fcaNNYP/G+lRWCIfpp34t84U7fMu1nqiQsphpFhdrn5uSP3EJZ2uLw/bfAGyk7e DjVA== X-Gm-Message-State: AOAM533vhs+hlsEdg5NFSRo8SVmgEYRSgSxVVXru3iWgmupTyDhWWJ3r pJ7ri3EqQ9Su+MSwrP6R4l7MuAZgw6tt4A== X-Google-Smtp-Source: ABdhPJzVo9TPXU72tMKJx1OqGfljxzOdKRkZtRWi99jvtt5VcB+PJQkDOW6DViVRsuXMB/ffkp0P1w== X-Received: by 2002:a37:60f:: with SMTP id 15mr913599qkg.211.1608234204469; Thu, 17 Dec 2020 11:43:24 -0800 (PST) Received: from [192.168.254.67] (h178.165.133.40.static.ip.windstream.net. [40.133.165.178]) by smtp.gmail.com with ESMTPSA id w15sm3599553qta.95.2020.12.17.11.43.23 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 17 Dec 2020 11:43:23 -0800 (PST) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: John Scalia Mime-Version: 1.0 (1.0) Subject: Re: Grant request Date: Thu, 17 Dec 2020 14:43:22 -0500 Message-Id: References: Cc: pgsql-admin@lists.postgresql.org In-Reply-To: To: Ron Watkins X-Mailer: iPad Mail (18B92) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Not to be sarcastic, but create the role and use it as group with only selec= t privileges everywhere. =E2=80=94 Jay Sent from my iPad > On Dec 17, 2020, at 2:25 PM, Ron Watkins wrote: >=20 > =EF=BB=BF > I have a Azure production server, and a group of users is requesting selec= t permissions for all tables, views, sequences, etc. > This is for all existing and all new objects in all schemas in the databas= e. > I don't see any kind of "db_datareader" role. Suggestions? >=20 > --=20 > Ron Watkins, AI7AK > 602.743.5272