...
(Sharon) We also need to create a schema for our legacy system data to which users only have read access
(John) This is outside the scope of Metadb, but can, of course, co-exist in the same database. In this case you could create a didicated role with ‘inherit’ which would function more or less as a group, create the schema, grant read-only privs to the role on the schema, and then add users to the role. Example:CREATE my_ro_schema_role INHERIT;
CREATE SCHEMA my_ro_schema;
GRANT USAGE ON SCHEMA my_ro_schema TO my_ro_schema_role;
GRANT SELECT ON ALL TABLES IN SCHEMA my_ro_schema to my_ro_schema_role;
GRANT my_ro_schema_role to $USER1;
GRANT my_ro_schema_role to $USER2;
etc.
...