cancel
Showing results for 
Search instead for 
Did you mean: 

user creation and missing options

SOLVED
Highlighted
Level 3 Adventurer

user creation and missing options

Trying to create a replication user based on documentation provided, but running into errors with each link option, as well as the exemption policy.  Below is the query I'm using, followed by examples of the error output:

 

CREATE ROLE edbrepuser WITH SUPERUSER INHERIT NOCREATEROLE NOCREATEDB
NO CREATE DATABASE LINK NO CREATE PUBLIC DATABASE LINK
NO DROP PUBLIC DATABASE LINK LOGIN REPLICATION NOBYPASSRLS
NO EXEMPT ACCESS POLICY PASSWORD 'blahblahblah';
ERROR:  option "createdblink" not recognized
ERROR:  option "createpublicdblink" not recognized
ERROR:  option "droppublicdblink" not recognized
ERROR:  option "exemptaccesspolicy" not recognized

If I remove each one of those options, I can create the user successfully, but I'd rather not have to go back and alter the user if possible.


Thank you,
Larry

1 ACCEPTED SOLUTION

Accepted Solutions
EDB Team Member

Re: user creation and missing options

Hi lgwapnitsky,

 

The options which you are specifying in the create role command are not valid options. You will have to grant/revoke those options immediately after the role is created.

 

Considering your case following set of commands will help you to proceed :

 

CREATE ROLE edbrepuser WITH SUPERUSER INHERIT NOCREATEROLE NOCREATEDB LOGIN REPLICATION NOBYPASSRLS PASSWORD 'blahblahblah'; 

REVOKE CREATE DATABASE LINK from edbrepuser;
REVOKE CREATE PUBLIC DATABASE LINK from edbrepuser;
REVOKE DROP PUBLIC DATABASE LINK from edbrepuser;
REVOKE EXEMPT ACCESS POLICY from edbrepuser;
 
If you are creating replication user then there is no need to give superuser privilege , create user as :
CREATE role edbrepuser with REPLICATION LOGIN PASSWORD 'blahblahblah'; 
 
Hope this helps you, let me know in case you have any issues  further.
 

 

2 REPLIES 2
EDB Team Member

Re: user creation and missing options

Hi lgwapnitsky,

 

The options which you are specifying in the create role command are not valid options. You will have to grant/revoke those options immediately after the role is created.

 

Considering your case following set of commands will help you to proceed :

 

CREATE ROLE edbrepuser WITH SUPERUSER INHERIT NOCREATEROLE NOCREATEDB LOGIN REPLICATION NOBYPASSRLS PASSWORD 'blahblahblah'; 

REVOKE CREATE DATABASE LINK from edbrepuser;
REVOKE CREATE PUBLIC DATABASE LINK from edbrepuser;
REVOKE DROP PUBLIC DATABASE LINK from edbrepuser;
REVOKE EXEMPT ACCESS POLICY from edbrepuser;
 
If you are creating replication user then there is no need to give superuser privilege , create user as :
CREATE role edbrepuser with REPLICATION LOGIN PASSWORD 'blahblahblah'; 
 
Hope this helps you, let me know in case you have any issues  further.
 

 

Level 2 Adventurer

Re: user creation and missing options

Perfect reply.