From c14a431177e5e14de3c00943ed84858e7eaa16fd Mon Sep 17 00:00:00 2001
From: Carlos Monastyrski <charly.monastyrski@gmail.com>
Date: Tue, 15 Jul 2025 16:06:36 -0300
Subject: [PATCH] Add missing setting for postgres app connection

---
 docs/integrations/app-connections/postgres.mdx | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docs/integrations/app-connections/postgres.mdx b/docs/integrations/app-connections/postgres.mdx
index 860e9ee3c..14d4a57a1 100644
--- a/docs/integrations/app-connections/postgres.mdx
+++ b/docs/integrations/app-connections/postgres.mdx
@@ -30,6 +30,14 @@ Infisical supports connecting to PostgreSQL using a database role.
                 -- enable permissions to alter login credentials
                 ALTER ROLE infisical_role WITH CREATEROLE;
                 ```
+                <Warning>
+                    For each user whose password will be rotated, you must grant that specific user role to your admin user with the ADMIN option:
+                    ```SQL
+                    -- grant each user role to admin user for password rotation
+                    GRANT <secret-rotation-user> TO <connection-username> WITH ADMIN OPTION;
+                    ```
+                    Replace `<secret-rotation-user>` with each specific username whose credentials will be rotated, and `<connection-username>` with the role that will perform the rotation.
+                </Warning>
             </Tab>
         </Tabs>
     </Step>