Re: createuser permssion for group

"chris smith" <dmagick(at)gmail(dot)com> writes:
> On 2/26/06, Jebus <lordjebus(at)gmail(dot)com> wrote:
>> Is it possible to give a group the the createuser permission ? This
>> way if a user in the group they can create users.

> Version 8.1.x does..

Note that even in 8.1, the special privileges like CREATEROLE aren't
implicitly inherited via group membership. You can use them but you
have to explicitly SET ROLE to the group that has 'em.
Example:

regression=# create group admin createrole;
CREATE ROLE
regression=# create user tgl in group admin;
CREATE ROLE
regression=# \c - tgl
You are now connected as new user "tgl".
regression=> create user foo;
ERROR: permission denied to create role
regression=> set role admin;
SET
regression=> create user foo;
CREATE ROLE

For more info see
http://www.postgresql.org/docs/8.1/static/role-membership.html

regards, tom lane