Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1up7UO-00H03R-LV for pgsql-general@arkaria.postgresql.org; Thu, 21 Aug 2025 15:46:10 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1up7UO-00HA0Y-3G for pgsql-general@arkaria.postgresql.org; Thu, 21 Aug 2025 15:46:08 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1up7UN-00HA0Q-OW for pgsql-general@lists.postgresql.org; Thu, 21 Aug 2025 15:46:08 +0000 Received: from fout-b1-smtp.messagingengine.com ([202.12.124.144]) by makus.postgresql.org with smtp (Exim 4.96) (envelope-from ) id 1up7UH-0012d1-2z for pgsql-general@lists.postgresql.org; Thu, 21 Aug 2025 15:46:07 +0000 Received: from phl-compute-11.internal (phl-compute-11.internal [10.202.2.51]) by mailfout.stl.internal (Postfix) with ESMTP id 1F50C1D00110; Thu, 21 Aug 2025 11:46:02 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-11.internal (MEProxy); Thu, 21 Aug 2025 11:46:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aklaver.com; h= cc:content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm2; t=1755791161; x=1755877561; bh=P+IVgm3vkIII00WKlQYhPGU2aBRUd0zxd4wTmNXvn90=; b= bw9vM9iAZ+EefwU4CnZSvMN9gT0QhmaMdZHInQaxYTbbPUNmT2K6BLn6z53BSkBq ctyV0yMtzkRWlyW70ZOb3Ql6m7/I7NOu7yGxH5JjK9LEr/7Ma5M61Ry5+rgCJPjZ 73i4zdSqLuM0q3myeWNIcdZxwdtXDDcZa/Ied2PLO83FlVzDtqIF6b7in677Mnnr Evhf/fQdr0I2cRxDnLjDlH7bf7m0ScpL30ynrW2Ssj2GuiIV5bXjKyRn25pEnP6Q EQMpTMZihiihZV+Luj1EyYV2f+m38NJNsBpCQXlTKnOhg6Jkiq2rO0sNtBKNRPeb aE2+qrfoTyOZ4Ai06+kfmg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1755791161; x=1755877561; bh=P +IVgm3vkIII00WKlQYhPGU2aBRUd0zxd4wTmNXvn90=; b=CSwoMCLY4afDSE5aL 5aiFnJ37CdYVnbpDOizuEj6aFrgr1ByT17jkpUwTlGnetDzzvlSJLQi/Kj89trG5 3EnNHiCk8ktaD7VhguOQMJIfsnovQHXBT4NgOxPqyV/BTs+wFwVF84CBGPQSz9Xr t8P3GfCFW52d2zvm4CeUlAtC7GboQs6yLLXJH6rX98YS1ItnQY6eK2XN3MBTExmQ 1rd3EK/8ttw8qZ3QHilQy+Z4Wu5b9QCFpFMI5NrBm83kHwGGNhQu50TFy0s7HMod okKNt7rf/ANaExVGrj0Q9t98noWBBu+jl+HedZ3GNjqfffWxfCGiTyOtSiREO1Qr bvqnA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeffedrtdefgdduieduieefucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfurfetoffkrfgpnffqhgenuceu rghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmnegouf hushhpvggtthffohhmrghinhculdegledmnecujfgurhepkfffgggfuffvfhfhjggtgfes thejredttddvjeenucfhrhhomheptegurhhirghnucfmlhgrvhgvrhcuoegrughrihgrnh drkhhlrghvvghrsegrkhhlrghvvghrrdgtohhmqeenucggtffrrghtthgvrhhnpeeutedv kedvffetkeejjefhueeufeeuveetiedvleefgedtkeduueetuefhieeuffenucffohhmrg hinhepsghlohhgshhpohhtrdgtohhmnecuvehluhhsthgvrhfuihiivgeptdenucfrrghr rghmpehmrghilhhfrhhomheprggurhhirghnrdhklhgrvhgvrhesrghklhgrvhgvrhdrtg homhdpnhgspghrtghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohep khgrrhhsthgvnhdrhhhilhgsvghrthesghhmgidrnhgvthdprhgtphhtthhopehpghhsqh hlqdhgvghnvghrrghlsehlihhsthhsrdhpohhsthhgrhgvshhqlhdrohhrgh X-ME-Proxy: Feedback-ID: i76984098:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 21 Aug 2025 11:46:00 -0400 (EDT) Message-ID: <3662a9b9-3e58-4977-8bd1-e1ed0e25b2a8@aklaver.com> Date: Thu, 21 Aug 2025 08:46:00 -0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Q: GRANT ... WITH ADMIN on PG 17 To: Karsten Hilbert , pgsql-general@lists.postgresql.org References: Content-Language: en-US From: Adrian Klaver In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 8/21/25 08:36, Karsten Hilbert wrote: > Dear all, > > PG 17 documentation says that using "WITH ADMIN" allows the > role being added to another group role to grant/revoke > membership in said group to other roles. I would start by reading this: https://rhaas.blogspot.com/2023/01/surviving-without-superuser-coming-to.html > > Thanks, > Karsten -- Adrian Klaver adrian.klaver@aklaver.com