Currently, admins use generic account mars_admin to administer the database and perform development work. This necessitates credential-sharing of an account with superuser, and that is something I would like to avoid. This is also problematic with respect to pgpass.conf and the mars_svc service account.
Using pg_ident.conf to map database privileges to user accounts would sidestep this issue and use Windows account credential management to provide privileged access.
The mars_shiny and mars_readonly accounts would likely remain.
Currently, admins use generic account
mars_adminto administer the database and perform development work. This necessitates credential-sharing of an account with superuser, and that is something I would like to avoid. This is also problematic with respect topgpass.confand themars_svcservice account.Using pg_ident.conf to map database privileges to user accounts would sidestep this issue and use Windows account credential management to provide privileged access.
The
mars_shinyandmars_readonlyaccounts would likely remain.