Zurück
-
Titel
Is it possible to run the PostgreSQL agent without superuser privileges on the database? -
Beschreibung
Is it possible to run the PostgreSQL agent without superuser privileges on the database? -
Lösung
The DB user must have access to all databases you wish to monitor. The agent will only query system tables and views and make use of a few system functions in order to gather operational data.
User privileges required for the PostgreSQL agent for versions 10+:- PG_MONITOR
- PG_READ_ALL_SETTINGS
- PG_READ_ALL_STATS
- PG_STAT_SCAN_TABLES
For versions below 10:- LOGIN
- CONNECT (on all databases)
- SELECT (on all databases)
The SUPERUSER or relevant privilege is only required in order to make use of various administration functions and requesting some explain plans through the Foglight console, if enabled in the agent. A separate user can be provided to the agent to perform those functions exclusively. Usage of these functions is restricted to Foglight users who have been granted the “PostgreSQL Administrator” role.