# Preserve PostgreSQL global objects beside database dumps

> Give shared roles and tablespaces an explicit recovery step beside per-database archives.

- Canonical URL: https://update.dsesecurity.com/updates/preserve-postgresql-global-objects-beside-database-dumps/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-10-15T13:32:24+00:00
- Modified: 2026-10-15T13:36:14+00:00
- Last reviewed by DSE: 2026-10-15
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

Give shared roles and tablespaces an explicit recovery step beside per-database archives.

## Potentially affected

This applies to PostgreSQL 17 recovery plans built around per-database logical archives. It concerns cluster-wide prerequisites, not a substitute for backing up each database's data.

## DSE recommendation

DSE recommends pairing each database-backup policy with an owned global-object export and recording which recovery stage restores it.

## Article

Give shared roles and tablespaces an explicit recovery step beside per-database archives.

## Source facts

A PostgreSQL 17 pg_dumpall export includes cluster-wide objects that individual pg_dump archives omit, including roles and tablespaces. Its globals-only option exports the shared objects without database contents. Producing a complete cluster export and restoring its role definitions commonly require elevated database privileges. The no-role-passwords option deliberately omits role password values; after restoration those roles cannot use password authentication until passwords are assigned. A globals export therefore needs an explicit credential-recovery decision.

Source: [PostgreSQL 17 — pg_dumpall](https://www.postgresql.org/docs/17/app-pg-dumpall.html).

## Applicability

This applies to PostgreSQL 17 recovery plans built around per-database logical archives. It concerns cluster-wide prerequisites, not a substitute for backing up each database’s data.

## DSE recommendation

DSE recommends pairing each database-backup policy with an owned global-object export and recording which recovery stage restores it. Protect that export as sensitive administration material. Decide deliberately whether password values are retained or reset during recovery, and document the separate recovery authority required. Include intended tablespace locations and ownership in the build sheet. Avoid assuming that restoring an application’s tables also reconstructs every role and filesystem prerequisite its owners depend on.

## Verification

Build an isolated empty cluster and rehearse the global-object stage before the selected database restore. Check role membership, intended ownership, tablespace paths, and the planned authentication-reset procedure. Record any deliberate differences from production so they are not mistaken for missing backup content.

## Official reference

[PostgreSQL 17 — pg_dumpall](https://www.postgresql.org/docs/17/app-pg-dumpall.html). Reviewed October 15, 2026.

## Primary reference

- Name: PostgreSQL 17 — pg_dumpall
- Authority: www.postgresql.org
- URL: https://www.postgresql.org/docs/17/app-pg-dumpall.html
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Preserve PostgreSQL global objects beside database dumps,” DSE Security, https://update.dsesecurity.com/updates/preserve-postgresql-global-objects-beside-database-dumps/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.