Inherit permissions in postgres

Question

I currently have a group role. This group role is called team. Team currently has the permission to create databases.

I have one user that is a member of team. But that user is unable to create a database. May I ask if anyone has some insight why the user is not inheriting permissions from the group?

Answer 1

CREATEDB is not a permission, but an attribute of the role. It is not inherited, much like the password, which is also an attribute of the role.

You will have to use ALTER TABLE to set the CREATEDB attribute on the member role:

ALTER ROLE enduser CREATEDB;

Another option is that the end users use SET ROLE to become the role with CREATEDB. Then they can create a database:

SET ROLE dbcreaterole;
CREATE DATABASE newdb;
RESET ROLE;