Re: Noinheritance with superuser

2021-06-03 Thread Tom Lane
saket bansal writes: > I have an RDS instance with the below configuration. > create role role1 login noinheritance; > grant rds_superuser to rdsdba; > grant rdsdba to role1 > In this case role1 is able to do all administrative operations, without the > need of switching to rdsdba. > Is this

Noinheritance with superuser

2021-06-03 Thread saket bansal
I have an RDS instance with the below configuration. create role role1 login noinheritance; grant rds_superuser to rdsdba; grant rdsdba to role1 In this case role1 is able to do all administrative operations, without the need of switching to rdsdba. Is this expected? I do not find any document