Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1up7hu-00H3mj-4U for pgsql-general@arkaria.postgresql.org; Thu, 21 Aug 2025 16:00:07 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1up7ht-00HJMP-IV for pgsql-general@arkaria.postgresql.org; Thu, 21 Aug 2025 16:00:06 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1up7ht-00HJMG-8M for pgsql-general@lists.postgresql.org; Thu, 21 Aug 2025 16:00:05 +0000 Received: from mout.gmx.net ([212.227.17.21]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1up7hr-0012j9-0W for pgsql-general@lists.postgresql.org; Thu, 21 Aug 2025 16:00:04 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.net; s=s31663417; t=1755791999; x=1756396799; i=karsten.hilbert@gmx.net; bh=juYyJsbk0Bm2ryW8ic6z0UZ1G+3KkSI1OLifaHviWsc=; h=X-UI-Sender-Class:Date:From:To:Cc:Subject:Message-ID:References: MIME-Version:Content-Type:In-Reply-To:Content-Transfer-Encoding: cc:content-transfer-encoding:content-type:date:from:message-id: mime-version:reply-to:subject:to; b=OqfxcxB+LyDkTA9UZxqzjKLhc6Pi2G81Q8cVIH2KneoXh6XTSJnHcf2ZO9EntLTk pRHcWRAeHf2pZp+fBmVoCndKOvmd67/y48iCdbkBMwhFkd/Zz3Qzv7vMSP8c3OOH2 ghbrCyxBBvfPNg4REXGqpeTscipb7DM+oTJWEQBZ5A57XZFlR3wAgfybxar5NloKL oOUVF52ZbLtVinZ/o1wQfD06DHU6gBnl7jDNDWZqZRHxhrDWM9GzAt8taHwTw//1f aYAPomLldxsJ/+F0EKlDK2XVrJl2U/Lzfwlp8cac1uanE0Rsj7AWYWJmoyqj2zrmn /KU4sY6JT+wK66oe3A== X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a Received: from hermes ([84.190.227.182]) by mail.gmx.net (mrgmx104 [212.227.17.168]) with ESMTPSA (Nemesis) id 1McH5Q-1uHAzj0S4a-00jmwC; Thu, 21 Aug 2025 17:59:59 +0200 Received: from ncq by hermes with local (Exim 4.96) (envelope-from ) id 1up7hm-0007g4-21; Thu, 21 Aug 2025 17:59:58 +0200 Date: Thu, 21 Aug 2025 17:59:58 +0200 From: Karsten Hilbert To: Adrian Klaver Cc: pgsql-general@lists.postgresql.org Subject: Re: Q: GRANT ... WITH ADMIN on PG 17 Message-ID: References: <3662a9b9-3e58-4977-8bd1-e1ed0e25b2a8@aklaver.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3662a9b9-3e58-4977-8bd1-e1ed0e25b2a8@aklaver.com> Ma_X_il-Followup-to: d Re_X_turn-receipt-to: Karsten.Hilbert@gmx.net Di_X_sposition-Notification-To: Karsten.Hilbert@gmx.net X-Confi_X_rm-Reading-To: Karsten.Hilbert@gmx.net X-Pri_X_ority: 2 (High) Sender: X-Provags-ID: V03:K1:ILvMov4dX4mkZHtygg+U1Yp2BCL5XRC3oJitMCGFhKSnpfL+a5i s313YAiLz+T+grVC7GqoBJQKFu5wHsv4iBiyoXMX9UTnDVn+u7TH7D5ZKPUzleUdYl+EqOP aQ5fGQQ4opNsT5e0Pr+pcYxHk3QIUIDGcdBaGfuzbriXC3DHA6gwpPVPMA/n83yO0pPihJY U4rO6JClWac7cxdzo0R9w== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:vOtslHebt5U=;vE26DrAolZ3DGtefZpwXr2qMv4f UVAuz8A9T7JmrRZEJnQsqf06Q5eyA7n3raF9PF6xZMMwFTr0lae6Szp3UprfVWGDkrV3G9tmL NaJyjeEfib3cgWsT9pYbKVkvtNy9fvWWvOxuVIHxGLE/tl4+4IgDSMAXzDmDNaohpt9J9BoHO Hr02aFQlamf7l/qZWceFH0ByT/nqUu6HrPv2gSpiPuImXqdb1AKs8SRV8wT8V6Itox2jCFUie 1qLfBY7p1EWe4hYtMLpm/3Ccdzgeul/WBKC5yR4fsrELYK9R+8+zoOcSFqR1ay+W202uPKSVC mKW4WMEkxumkQT+tkAGoPe40q+8P5P1ijUhA2UJ6lGONclfipo3J7GtKK/V8NOPlKq179QYL1 MbcnapkW+FSJJ9uU9adQNoWliZWs8BMUTNDhP6C0MBQDEERfvl4MavvcFinDb63mR25QtikNT oTr7ExuM3ORCLdTxf4HB1LVFlt1fQykzZdrb9msqJZRX1v6B0T5uMs7MAuqc8mWVVXzDEknar IzbIHRFRGVeS9TKdbHat2I6zJ6Q2WIxAVPZ6LSB+/WDOEwb2cxLUtObloy6c3ngTgtD/P+6GL LDaFgSq399J4wiOd5OBvPZhu5qcovGM7zbkJ10wEUCNRzv1z/2tkW9PqlvPPqLYbUD4Bq6s1+ SzI60CBiuFv2vLAhxptOw79xHDixvBi3vmwjx3qDWhi61kdLLjivj/9eZKgemluUqI3il4RpH trAgveA6anJSY9SqpS3zJSpnRsHbNOjD+RvEurg2DBa6350vtW3rd6MXZVDEW3MBJMqL2kxSi x7n7JeD2Z2a3c1nSKREKrf+WDDeGCHnvh5k30MWoDW1XRZDXShlQ0e0ac/bgxy+dU8wW5pfiG +V272BNtkK+Qqu5F4cYdkLYiF1XprpzvByLhd/cr5RcZ8Eaib+TvvPPaxDzwqX7waUn/AhdpS TC5T9GX157HRe/xQWEPVqPA9mwzZ3lfyp6hShPZiLluLKcLebXwN+jR2aFkAfqKCE8rTVtdZS UgfxQXgzDYaE+k7YJDXNnM5KvpVn4Qvvs5GL7E05v3fb0f6dOs6QXxaRmncrpHcvQUcdT7DyU sezmUgmdxx4ZuPUfBxWS06ZE1pcQmCFxX8iujKMqW4TIJvTffdVLEeoMMBKLlVEVUitEMxqr0 VO8UtfDos22m/4hF4w++P26Z0cOPbxIupdTCoz1Ji35oRCIh2xBrO0ru+LmNnvElquXQFeboe UZgjjxk5Fc6ZRi1ymeijBALFesQx8EG0vy0xuhzMQCBsqNIwYpV1qvZBXfBBd/OnkT4WIC8VW OKnmvkypyAcbI+KYzaGZ2lhNs3M/sWYcfjV0uvnuTME873bk1DMMZJIsing/2Kt1L4/NM5lcH 8LCDzUiOFUCMn4BtqLDqoyA63IgiNwAOn/BixMN/PJfwxy5tftu0+zNgZI2TTcnrhs8OB71kz rIdRqvUNqHMjOL/yIALmtLLy2yMTv1hZ6Nl8mLuMg7KLTNuA9g6+srYX9C/EiQMYRAp1qchSV OukX9Wq7MT38AtYV16VADHhgGSC909Ox75cnp4TAyv4HhDQubWhDJ6ws9RD1DX4WW8FDThQrq H3d9CIiQMyWkBwY+ok8SSsvSwB8JVSFN8tOvT/Uvry8ndZ4CWZybua7QD/uvJJGqYjKwcWCIV 0HL9HXaw/W2O7FizAqyQULR1L0+VsjBKTehid3mFicxdHcaRk6bK3QuMLXJpHfkd3H/VIkc2U XGsiXgA5wvUqnTIGRr9VS4cH4hYCYm5JtkmCIQpGcN1aBjxn8+sC/9kS1hWAt/ZjhaToAra5M EKx+rwFduT7mTmqtfe/m+tNnzyuAVdHHzNdafjnnaBbQ1k+GpaRFi18bjm9VRlzWzoO2d3XGK kKRhC9fVc97J1Kto6kyIj7lGDrSCTSleIn+bFrvJYd3tU/PDTFQdCytHPH4pyz+yQ2LB/X2r6 3Da2N8+osJ5H/+IyZa6seMXXainXOKXWTHeJrO3OtNc53kLyprOru5s48oL39ICtzNlAkvsEw zbDJ6Il5+5pSNFVtqNmpBObbGM3WhYhRf2EmGkZdWCw1luPSeYjs3VRwMUkVjAMTvdDTb8Tck xQ8tUwgrVBGoEROjaUXKUKsJJfr1LguuaNanvdzIIOIWh367VGGVwHBKH/6HkcK0TvZHpLsn9 +bpbYmG+2UZukKEJQ3wFxaouFVhGWsNPgzegBNrsl/9wd8ktHI6FHSqavIGJEPxJDq5L8VATr fUGQWAMskStnBiNSlnON8EUS9CtPPAltRbq+a22AcHbNWFdIdQFHi1YDvakPiREgDvpb9XEzM GPf2UUY3hCR4a9mpzQ6HTywcf56FZuAClTVtbSGSFanaXVLz1qtbQpCBSSXR4ewPFiQJg/C8x CghXuvfEPmz6D3lnuzlaI4G/R/vKIaLiFXEBtF9WM1mqoWB5e57OQwZxa1VQTJaDdfNLO31d0 CQyZFT9c4Lfh7uNF/tUFCapDHBMs3vDyYrc0GZjrlGXK5NNFcUQozl5bRKYjLEzMWr5kbNR1k 6OEgPj1UCEhS6QiLI7LwhT8SNUTCckMaV77sX5TQiiSWlj0lv25Ac+oCbErLiJPkRyeBbNj29 mIz7iOuO4ZrLt1kJLo8mdPqi39xxAMFSZ9g8uDEsscr1xZoa80iOy8WidIrWMp+1DJ7xx5gMn vI215CF2czwa1ZlgvL0z1odEc2fsQPtCVHl9Ql/X0jk7xDUfbqLzPCF/euOFY0f6FUuGFmiyx hc7DVciNJPpb2doQ68tI8DzVzOoz7pGE6IVEEBKytmi0OseoEhAQDxJaVE3ZLE/FpGrlaQ1Db hSsxUr52aUhY8RBVrlxjOwBpyznX1hwyAWNQjShriAFS65p0kwWLAtlTON1D87sDejhhNfyTR 0/to2vlJE/5epADYm3XSv3I2qT0CwhEqs12b48h17mzDS34Q4nuMG+QLTd7OCo46paUso0prx 1azhbo5Sux1nTYdGGDhBhE8R6uUnqMRtwDP/BohQ+PZV1EMLNYa4N1YCDRiWxjekHwN25zknr G64pu7Io8B6LbULivqHyHpHKCmAYtJ3+Yy8d3Oa2cKty6seYRNJ75zFHlyYQJbG2sfXdK8ARO ucjp3LOMk5JbI1z3Fl1TaacPQYSBSTqisxP5xbhnFjihfP965JvwkrrQuFiva/HAH++CdF0mv rLkQpBhl1h3RnwU0BKSzbNdXVUdO5CspR7nUnsKza/nYNwTf1kUMQq7+aazvqoQUM2IN4I25Y gJyfK47Qwe1vtRamgmezi/vgPiXbKdgMEmojuBbLCM7kkxotZNDpuvR2l/GMD4/F2N0yXoLmR T/ks7ij9ltiIygCsXU9ItzTP70k68qeDEUT6pjPHquT038eBdwVCpmfY2qBeRJ35iP+oUx1PK KPSUSyYVetDITZzr3Muspcm/dHdwjkEjKoZbMRgjOYVd6dzx74DSEFY+6ks7nfbM32Ry0fPZ7 dxm7QPf4mPLc2/CJF/IBe1iR8ziC0TyexO0WsbiL/6DL8Hr+bvAIqD0Id68fJN0FZQu9OtioW wc72JVAD/6y0H7vSFtEZX00z46bWu/Jpp9bnU5dDuf6IGFi1SJX1TsjM6VHIfnrqlUJNvColu xjiXKPpXMqiX5HpD4gHXmZIDT9Al4oZi83WFijdiNYsoJrUZcGNOZ2bltigYTfMqWnKaYc2oe 28pu6F7T02Vuoo/Vv1ZPiDskDFtrfkziGz6yA1sJ4zB5v+xUubCWCHa+GqyusV6RKJiCyoWBG 9IHybEU+ZBJ3VbpYuGPnp+jVduVHSQro5Y9VLoHnowlyJUidvZhR3AjxHN1Io4RiZZy+MkXks ceHvQ/dMclRE58ZoMT+m29OyvKvSBPXdvhAKJ+E7+dbrQwxapcvj8nnoDQ5rUOLrsiLAzWjiN pc1BTYih44PBtFW2t25ryQO+dUKjlIshYiOAPegU9KwcpVjAqa0s4ax+8yVbJ4Bxfu3T3rqn3 GHcZpQa4c02XLoXYbyhsrmYxZESDMuyyoATp4Z3H3UKgTEq2a0d5838nNkuutffUtL3tiSyId xytw+VJT92Gp8uPyv/LXGmdt6lHmJUnI+0HhArmjjCf7EBp4eeY0oAiYVimLgJWy7xZvfWfJg CnBK7ArxNcrmIModVKGbdNp3CWJKfDHPn3jySaq+Fxulzu5C9xxIVNeKvu8PQ/QHMywq0x3cW LKi4G771FJbIgasadwldafyk0vtaiw9xvJ2ZMzO5s6NKE11L+lFHRE/Dr6hF4MDNCYGwRAezR ynjTbgKjInXMBcC1KZVvwCI8YrmC4zDq3RuOd0fThh/+HsUbApoz63/AVxnTvQq5+1JmgYzD8 Z9gPEgImxNj+AujQp3KuAcFZAt/deMxwQ5Ed0B8dyDQxZjCRk9q/6K4ArzNp+SOVNaN162dZ0 G7fCeuUUPipURXqPgrePg5EnBy3aJ6DyHsKZZs20Y6HPAII26f3Mz+3+69ikXExYbOlgGenmC qSPjIqy0DX6atWW4BsiAVrIlFfvNjyDmXqYZVRCZ/kBamqI2CG2NNocAFgsMFLwIxq/4WcH4P NDhxUD2rktj0o3X5ADztw4Gu/kz7lIt44ULoYjQOFXwk0eukZ6vJD6JQDyMWxZy27+hldtI8v 2UuFCTq/PvpH1j70= Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Am Thu, Aug 21, 2025 at 08:46:00AM -0700 schrieb Adrian Klaver: > >PG 17 documentation says that using "WITH ADMIN" allows the > >role being added to another group role to grant/revoke > >membership in said group to other roles. >=20 > I would start by reading this: >=20 > https://rhaas.blogspot.com/2023/01/surviving-without-superuser-coming-to= .html Thanks, I did, but did not find the answer to: Is there a way for a role that can manage membership in a group role to not itself be a member of that group role ? Best regards, Karsten =2D-=20 GPG 40BE 5B0E C98E 1713 AFA6 5BC0 3BEA AC80 7D4F C89B