Azure superuser role granted a select permission to some roles -pg_stat_statements and pg_buffercache

GeethaThatipatri-MSFT 29,017 Reputation points Microsoft Employee
2024-07-26T18:00:35.7566667+00:00

Why are some of my roles assigned to all tables in my databases where the grantor is azure_superuser, and what can be the causes? The tables pg_stat_statements and pg_buffercache

PS - Based on common issues that we have seen from customers and other sources, we are posting these questions to help the Azure community

Azure Database for PostgreSQL
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. GeethaThatipatri-MSFT 29,017 Reputation points Microsoft Employee
    2024-07-26T18:01:08.9666667+00:00

    Greetings!

    This behavior is expected and by design. The Azure superuser role is responsible for managing system-level operations and maintenance tasks in Azure Database for PostgreSQL. The tables pg_stat_statements and pg_buffercache are system tables that are not created by the customer. These tables require superuser privileges to grant permissions for monitoring and performance tuning purposes. Therefore, seeing the azure_superuser as the grantor of permissions on these tables is normal and necessary for the proper functioning of the database system.

     

     

    Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

     

    Please do not forget to  "up-vote" wherever the information provided helps you, as this can be beneficial to other community members.

    Regards

    Geetha

    0 comments No comments