Was there a reason Microsoft Azure removed the azure_superuser role from new instances of Azure Database for PostgreSQL? Was there an announcement about this?

Question

Our application looks for the azure_superuser role's existence in an Azure Database for PostgreSQL flexible server. It appears, this role is no longer included in the list of roles and we're seeing a failure in our application as a result. In an instance I created about a year ago, this role was present. Is this change documented anywhere?

Answer 1

Hi @Ron Lazar ,

Azure Postgres SQL server is a managed database PaaS service. You cannot connect as an azure_superuser.

The admin user is the highest privilege user you have on the server for Azure Postgres SQL. It belongs to the role azure_pg_admin. This role does not have full superuser permissions. The PostgreSQL superuser attribute is assigned to the azure_superuser, which belongs to the managed service. You do not have access to this role.

You will have access to the Admin account instead. This has been the case for a while and is documented here: Azure PostgreSQL Server Admin Document

"The server admin account is not part of the azure_superuser role. Since this service is a managed PaaS service, only Microsoft is part of the super user role."

Let me know if this helps address your question.

If the information helped you, please Accept the answer. This will help us and improve searchability for others in the community who may be researching similar questions.