...
Please let us know how testing goes and if any adjustments are needed (edited)
-----
(saved slack message from Carole)
Carole Godfrey
Image Added Yesterday at 3:08 PM
I also agree with trying to keep permissions simple and having users use the z_metadbuser_cornell account where possible. Wanted to share a sql statement that you may find useful.For the local_statistics schema (where only 3 users have write access)
z_slm5, z_lm15, z_vp25
The below sql applies to newly created tables that your user creates
(granting permissions to other users for read/write access)
https://dba.stackexchange.com/questions/135168/alter-default-privileges-for-role
ALTER DEFAULT PRIVILEGES for user z_slm5 IN SCHEMA local_statistics GRANT SELECT ON TABLES TO z_lm15, z_vp25; ALTER DEFAULT PRIVILEGES for user z_slm5 IN SCHEMA local_statistics GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO z_lm15, z_vp25;
See reference below:
Image AddedDatabase Administrators Stack Exchange
Alter default privileges for role