public inbox for [email protected]  
help / color / mirror / Atom feed
Re: Q: GRANT ... WITH ADMIN on PG 17
2+ messages / 2 participants
[nested] [flat]

* Re: Q: GRANT ... WITH ADMIN on PG 17
@ 2025-08-21 16:11  David G. Johnston <[email protected]>
  0 siblings, 1 reply; 2+ messages in thread

From: David G. Johnston @ 2025-08-21 16:11 UTC (permalink / raw)
  To: Karsten Hilbert <[email protected]>; +Cc: Adrian Klaver <[email protected]>; [email protected] <[email protected]>

On Thursday, August 21, 2025, Karsten Hilbert <[email protected]>
wrote:

> Am Thu, Aug 21, 2025 at 08:46:00AM -0700 schrieb Adrian Klaver:
>
> > >PG 17 documentation says that using "WITH ADMIN" allows the
> > >role being added to another group role to grant/revoke
> > >membership in said group to other roles.
> >
> > I would start by reading this:
> >
> > https://rhaas.blogspot.com/2023/01/surviving-without-
> superuser-coming-to.html
>
> Thanks, I did, but did not find the answer to: Is there a
> way for a role that can manage membership in a group role to
> not itself be a member of that group role ?
>

A superuser can do this.  Otherwise, no.  In order to be made admin of a
role on must be a member of said role - i.e., “with admin” is only part of
the “grant” command.  You won’t find docs talking about alternatives
because they don’t exist.

David J.


^ permalink  raw  reply  [nested|flat] 2+ messages in thread

* Re: Q: GRANT ... WITH ADMIN on PG 17
@ 2025-08-21 16:17  Karsten Hilbert <[email protected]>
  parent: David G. Johnston <[email protected]>
  0 siblings, 0 replies; 2+ messages in thread

From: Karsten Hilbert @ 2025-08-21 16:17 UTC (permalink / raw)
  To: David G. Johnston <[email protected]>; +Cc: Adrian Klaver <[email protected]>; [email protected] <[email protected]>

Am Thu, Aug 21, 2025 at 09:11:57AM -0700 schrieb David G. Johnston:

> > Thanks, I did, but did not find the answer to: Is there a
> > way for a role that can manage membership in a group role to
> > not itself be a member of that group role ?
> 
> A superuser can do this.  Otherwise, no.  In order to be made admin of a
> role on must be a member of said role

Thanks, fine, that makes it clear to me.

Regards,
Karsten
-- 
GPG  40BE 5B0E C98E 1713 AFA6  5BC0 3BEA AC80 7D4F C89B






^ permalink  raw  reply  [nested|flat] 2+ messages in thread


end of thread, other threads:[~2025-08-21 16:17 UTC | newest]

Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2025-08-21 16:11 Re: Q: GRANT ... WITH ADMIN on PG 17 David G. Johnston <[email protected]>
2025-08-21 16:17 ` Karsten Hilbert <[email protected]>

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox