Postgres: Create resource account
alter user paytbiadmin with nosuperuser ; #Detail: Only roles with the SUPERUSER attribute may change the SUPERUSER attribute.
grant cloudsqladmin to pgpaytbiadmin; #Detail: Only roles with the SUPERUSER attribute may grant roles with the SUPERUSER attribute.
alter user paytbiadmin with nocreaterole;
alter user paytbiadmin with nocreatedb ;
GRANT CONNECT ON DATABASE paytbitest TO paytbiadmin;
GRANT usage ON SCHEMA paytbiadmin TO paytbiadmin;
grant create on schema paytbiadmin to paytbiadmin;
grant select on all tables in schema paytbiadmin to paytbiadmin;
grant all on schema paytbiadmin to paytbiadmin;
ALTER DEFAULT PRIVILEGES FOR ROLE paytbiadmin IN SCHEMA paytbiadmin GRANT ALL ON TABLES TO paytbiadmin;
ALTER DEFAULT PRIVILEGES FOR ROLE paytbiadmin IN SCHEMA paytbiadmin GRANT ALL ON SEQUENCES TO paytbiadmin;
ALTER DEFAULT PRIVILEGES FOR ROLE paytbiadmin IN SCHEMA paytbiadmin GRANT EXECUTE ON FUNCTIONS TO paytbiadmin;
ALTER DEFAULT PRIVILEGES FOR ROLE paytbiadmin IN SCHEMA paytbiadmin GRANT USAGE ON TYPES TO paytbiadmin;
pgpaytbiadmin is the DBA account
grant paytbiadmin to pgpaytbiadmin;
grant connect on database paytbitest to pgpaytbiadmin;
grant usage on schema paytbiadmin to pgpaytbiadmin;
Comments
Post a Comment