{"id":21024,"date":"2022-12-14T10:41:43","date_gmt":"2022-12-14T09:41:43","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/?p=21024"},"modified":"2022-12-14T10:41:44","modified_gmt":"2022-12-14T09:41:44","slug":"postgresql-16-further-reducing-tasks-that-require-superuser","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/","title":{"rendered":"PostgreSQL 16: Further reducing tasks that require superuser"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In a <a href=\"https:\/\/www.dbi-services.com\/blog\/postgresql-16-more-flexibility-for-vacuum-and-analyze\/\" target=\"_blank\" rel=\"noreferrer noopener\">previous post<\/a> we&#8217;ve seen that <a href=\"https:\/\/www.postgresql.org\/docs\/current\/sql-vacuum.html\" target=\"_blank\" rel=\"noreferrer noopener\">vacuum<\/a> and <a href=\"https:\/\/www.postgresql.org\/docs\/current\/sql-analyze.html\" target=\"_blank\" rel=\"noreferrer noopener\">analyze<\/a> operations can be granted to users which are not superuser starting with PostgreSQL 16. Work is still in progress to further reduce maintenance tasks which require superuser privileges. Today another patch was committed which brings even more delegation for maintenance operations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One more, a simple setup to demonstrate what has been done:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: sql; title: ; notranslate\" title=\"\">\npostgres=# select version();\n                                               version                                                \n------------------------------------------------------------------------------------------------------\n PostgreSQL 16devel on x86_64-pc-linux-gnu, compiled by gcc (Debian 10.2.1-6) 10.2.1 20210110, 64-bit\n(1 row)\n\npostgres=# create user u with password &#039;u&#039; login;\nCREATE ROLE\npostgres=# create user v with password &#039;v&#039; login;\nCREATE ROLE\npostgres=# create schema su authorization u;\nCREATE SCHEMA\npostgres=# \\c postgres u\nYou are now connected to database &quot;postgres&quot; as user &quot;u&quot;.\npostgres=&gt; create table su.t ( a int, b text );\npostgres=&gt; create unique index i on su.t(a);\nCREATE INDEX\npostgres=&gt; create materialized view su.mv as select * from su.t;\nSELECT 0\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">Two users, one having a schema containing a table, an unique index, and a materialized view. We&#8217;ve already seen that we can grant vacuum and analyze of objects to another user:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: sql; title: ; notranslate\" title=\"\">\npostgres=# grant analyze on su.t to v;\nERROR:  syntax error at or near &quot;analyze&quot;\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">This does not work anymore. Instead of granting separate privileges for maintenance operations these are now grouped together under a single privilege:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; title: ; notranslate\" title=\"\">\npostgres=# grant maintain on su.t to v;\nGRANT\npostgres=# grant maintain on su.mv to v;\nGRANT\npostgres=# grant usage on schema su to v;\nGRANT\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">The maintain privilege consist of these privileges:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>VACUUM<\/li>\n\n\n\n<li>ANALYZE<\/li>\n\n\n\n<li>REINDEX<\/li>\n\n\n\n<li>REFRESH\u00a0MATERIALIZED\u00a0VIEW<\/li>\n\n\n\n<li>CLUSTER<\/li>\n\n\n\n<li>LOCK\u00a0TABLE<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Having that privilege all these operations are delegated:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: sql; title: ; notranslate\" title=\"\">\npostgres=&gt; analyze su.t;\nANALYZE\npostgres=&gt; refresh materialized view su.mv;\nREFRESH MATERIALIZED VIEW\npostgres=&gt; reindex index su.i;\nREINDEX\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">A new role has been added as well, which grants all these operations by default:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: sql; highlight: [7]; title: ; notranslate\" title=\"\">\npostgres=# \\c postgres u\nYou are now connected to database &quot;postgres&quot; as user &quot;u&quot;.\npostgres=&gt; create table su.x ( a int );\nCREATE TABLE\npostgres=&gt; \\c postgres postgres\nYou are now connected to database &quot;postgres&quot; as user &quot;postgres&quot;.\npostgres=# grant pg_maintain to v;\nGRANT ROLE\npostgres=# \\c postgres v\nYou are now connected to database &quot;postgres&quot; as user &quot;v&quot;.\npostgres=&gt; analyze su.x;\nANALYZE\npostgres=&gt;\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">This is nice, as  it further reduces the tasks that require superuser privileges.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In a previous post we&#8217;ve seen that vacuum and analyze operations can be granted to users which are not superuser starting with PostgreSQL 16. Work is still in progress to further reduce maintenance tasks which require superuser privileges. Today another patch was committed which brings even more delegation for maintenance operations. One more, a simple [&hellip;]<\/p>\n","protected":false},"author":28,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229,198],"tags":[2602],"type_dbi":[],"class_list":["post-21024","post","type-post","status-publish","format-standard","hentry","category-database-administration-monitoring","category-database-management","tag-postgresql-2"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.8 (Yoast SEO v28.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>PostgreSQL 16: Further reducing tasks that require superuser - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PostgreSQL 16: Further reducing tasks that require superuser\" \/>\n<meta property=\"og:description\" content=\"In a previous post we&#8217;ve seen that vacuum and analyze operations can be granted to users which are not superuser starting with PostgreSQL 16. Work is still in progress to further reduce maintenance tasks which require superuser privileges. Today another patch was committed which brings even more delegation for maintenance operations. One more, a simple [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-14T09:41:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-14T09:41:44+00:00\" \/>\n<meta name=\"author\" content=\"Open source Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Open source Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/postgresql-16-further-reducing-tasks-that-require-superuser\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/postgresql-16-further-reducing-tasks-that-require-superuser\\\/\"},\"author\":{\"name\":\"Open source Team\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/4bae5e5dd8c7d48edbd948772b49b202\"},\"headline\":\"PostgreSQL 16: Further reducing tasks that require superuser\",\"datePublished\":\"2022-12-14T09:41:43+00:00\",\"dateModified\":\"2022-12-14T09:41:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/postgresql-16-further-reducing-tasks-that-require-superuser\\\/\"},\"wordCount\":175,\"commentCount\":0,\"keywords\":[\"postgresql\"],\"articleSection\":[\"Database Administration &amp; Monitoring\",\"Database management\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/postgresql-16-further-reducing-tasks-that-require-superuser\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/postgresql-16-further-reducing-tasks-that-require-superuser\\\/\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/postgresql-16-further-reducing-tasks-that-require-superuser\\\/\",\"name\":\"PostgreSQL 16: Further reducing tasks that require superuser - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\"},\"datePublished\":\"2022-12-14T09:41:43+00:00\",\"dateModified\":\"2022-12-14T09:41:44+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/4bae5e5dd8c7d48edbd948772b49b202\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/postgresql-16-further-reducing-tasks-that-require-superuser\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/postgresql-16-further-reducing-tasks-that-require-superuser\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/postgresql-16-further-reducing-tasks-that-require-superuser\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PostgreSQL 16: Further reducing tasks that require superuser\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/4bae5e5dd8c7d48edbd948772b49b202\",\"name\":\"Open source Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g\",\"caption\":\"Open source Team\"},\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/author\\\/open-source-team\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"PostgreSQL 16: Further reducing tasks that require superuser - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/","og_locale":"en_US","og_type":"article","og_title":"PostgreSQL 16: Further reducing tasks that require superuser","og_description":"In a previous post we&#8217;ve seen that vacuum and analyze operations can be granted to users which are not superuser starting with PostgreSQL 16. Work is still in progress to further reduce maintenance tasks which require superuser privileges. Today another patch was committed which brings even more delegation for maintenance operations. One more, a simple [&hellip;]","og_url":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/","og_site_name":"dbi Blog","article_published_time":"2022-12-14T09:41:43+00:00","article_modified_time":"2022-12-14T09:41:44+00:00","author":"Open source Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Open source Team","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/"},"author":{"name":"Open source Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/4bae5e5dd8c7d48edbd948772b49b202"},"headline":"PostgreSQL 16: Further reducing tasks that require superuser","datePublished":"2022-12-14T09:41:43+00:00","dateModified":"2022-12-14T09:41:44+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/"},"wordCount":175,"commentCount":0,"keywords":["postgresql"],"articleSection":["Database Administration &amp; Monitoring","Database management"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/","url":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/","name":"PostgreSQL 16: Further reducing tasks that require superuser - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2022-12-14T09:41:43+00:00","dateModified":"2022-12-14T09:41:44+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/4bae5e5dd8c7d48edbd948772b49b202"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/postgresql-16-further-reducing-tasks-that-require-superuser\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"PostgreSQL 16: Further reducing tasks that require superuser"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/4bae5e5dd8c7d48edbd948772b49b202","name":"Open source Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/eb4fb12e386e8c41fdef0733e8114594cf2653e4f55e9fa2161442b8eaf3f657?s=96&d=mm&r=g","caption":"Open source Team"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/open-source-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/21024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=21024"}],"version-history":[{"count":2,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/21024\/revisions"}],"predecessor-version":[{"id":21030,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/21024\/revisions\/21030"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=21024"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=21024"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=21024"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=21024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}