Re: Q: GRANT ... WITH ADMIN on PG 17 - Mailing list pgsql-general

From Karsten Hilbert
Subject Re: Q: GRANT ... WITH ADMIN on PG 17
Date
Msg-id aKdCfim8i_TNw16S@hermes.hilbert.loc
Whole thread Raw
In response to Re: Q: GRANT ... WITH ADMIN on PG 17  (Adrian Klaver <adrian.klaver@aklaver.com>)
Responses Re: Q: GRANT ... WITH ADMIN on PG 17
Re: Q: GRANT ... WITH ADMIN on PG 17
List pgsql-general
Am Thu, Aug 21, 2025 at 08:46:00AM -0700 schrieb Adrian Klaver:

> >PG 17 documentation says that using "WITH ADMIN" allows the
> >role being added to another group role to grant/revoke
> >membership in said group to other roles.
>
> I would start by reading this:
>
> https://rhaas.blogspot.com/2023/01/surviving-without-superuser-coming-to.html

Thanks, I did, but did not find the answer to: Is there a
way for a role that can manage membership in a group role to
not itself be a member of that group role ?

Best regards,
Karsten
--
GPG  40BE 5B0E C98E 1713 AFA6  5BC0 3BEA AC80 7D4F C89B



pgsql-general by date:

Previous
From: Adrian Klaver
Date:
Subject: Re: Streaming replica hangs periodically for ~ 1 second - how to diagnose/debug
Next
From: "David G. Johnston"
Date:
Subject: Re: Q: GRANT ... WITH ADMIN on PG 17