title: Readonly permissions for redshift schema
body: <p>I want to give readonly permission to group in redshift.
  I used this command</p>
  
  <pre><code>GRANT USAGE ON SCHEMA myschema TO GROUP my_group; 
  GRANT SELECT ON ALL TABLES IN SCHEMA myschema TO GROUP my_group; 
  ALTER DEFAULT PRIVILEGES IN SCHEMA myschema GRANT SELECT ON TABLES TO GROUP my_group; REVOKE CREATE ON SCHEMA myschema FROM GROUP my_group;"
  </code></pre>
  
  <p>This works but look like if new tables are created then user dont have permissions for those tables</p>
  
  <p>According to AWS</p>
  
  <blockquote>
    <p>IN SCHEMA schema_name</p>
    
    <p>Optional. If an IN SCHEMA clause appears, the specified 
    default privileges are applied to new objects created in the 
    specified
    schema_name. In this case, the user or user group that is the target
    of ALTER DEFAULT PRIVILEGES must have CREATE privilege for the
    specified schema. Default privileges that are specific to a schema are
    added to existing global default privileges. By default, default
    privileges are applied globally to the entire database.</p>
  </blockquote>
  
  <p>Does that mean that i have to give CREATE permission to that group ?</p>