How to delete a Microsoft Entra ID

Hi Marco Molica

Greetings!

As we understand that, you are facing an issue where the previous Microsoft Entra ID is still lingering in your database authentication, preventing you from properly redeploying your web app.

It looks like the role you are trying to delete has dependencies within your PostgreSQL database, which is preventing its removal.

Here are a few steps you can try:

Identify Dependencies – Run the following query to check which objects depend on the role:

SELECT * FROM pg_roles WHERE rolname = 'automanlmax-rec-api-dev';

You can also check ownership using:

SELECT * FROM pg_catalog.pg_shdepend WHERE refobjid = (SELECT oid FROM pg_roles WHERE rolname = 'automanlmax-rec-api-dev');

Reassign Ownership – If the role owns objects, you may need to transfer ownership before dropping it:

REASSIGN OWNED BY "automanlmax-rec-api-dev" TO new_role;

Drop Privileges – If the role has privileges on objects, revoke them:

DROP OWNED BY "automanlmax-rec-api-dev";

Attempt Role Deletion Again – Once ownership and privileges are reassigned or removed, try:

DROP ROLE "automanlmax-rec-api-dev";

If you are still facing issues, you might need to check if the role is tied to any system-level dependencies or if there are lingering permissions preventing deletion.

Here are links to several parallel threads that may be helpful to you:

https://stackoverflow.com/questions/32988702/how-to-drop-user-in-postgres-if-it-has-depending-objects

I hope this information helps. Please do let us know if you have any further queries.

Hi! Thanks you for your answer.

As you already said, there is a role still present in db which owns e objects, and i'm able to find them by executing your query.

The problem is that i got error if try to reassign:

SQL Error [42501]: ERROR: permission denied to reassign objects Detail: Only roles with privileges of role "automanlmax-rec-api-dev" may reassign objects owned by it.

The problem is that role is created by System, so i cannot log to psql using it cause i don't have a password, and I'm not able to run a query from webapp itself cause db refuses connection due to oid mismatch

Thanks

I also tried to grant role "automanlmax-rec-api-dev" to my role in order to execute the query, but i got

SQL Error [42501]: ERROR: permission denied to grant role "automanlmax-rec-api-dev"

Detail: Only roles with the ADMIN option on role "automanlmax-rec-api-dev" may grant this role.

Error position:

And the only role who has this privileges seems to be pg_azure

Hi Marco Molica

Could you please share the requested details via private message as it will help us conduct a more thorough investigation.

Hi Marco Molica

We haven’t heard from you on the last response and wanted to follow up to check if your issue has been resolved.

Please do let us know if you have any further queries.