SIGN IN SIGN UP

Migration Permissions (#422)

When creating the DBOS system tables with `dbos migrate` you can now
specify an "application role."
If you specify this role, it is granted all permissions needed to run a
DBOS app.

```
 Usage: dbos migrate [OPTIONS]

 Create DBOS system tables.

╭─ Options ──────────────────────────────────────────────────────────────╮
│ --db-url      -D      TEXT  Your DBOS application database URL         │
│                             [default: None]                            │
│ --sys-db-url  -s      TEXT  Your DBOS system database URL              │
│                             [default: None]                            │
│ --app-role    -r      TEXT  The role with which you will run your DBOS │
│                             application                                │
│                             [default: None]                            │
│ --help                      Show this message and exit.                │
╰────────────────────────────────────────────────────────────────────────╯
```

This is most useful in settings where the application runs with an
"application role" that does not have sufficient privileges to create
the DBOS system database or system tables. Prior to deployment, the dbos
migrate command can be run with a privileged user to create DBOS system
tables, specifying the application role to which to grant permissions on
those tables. Then, the application can safely run with the application
role.
P
Peter Kraft committed
cbf3f1b2f2745316889e2e2c1ddb58e33b024c9a
Parent: 0bf825a
Committed by GitHub <noreply@github.com> on 8/6/2025, 7:06:19 PM