Merge remote-tracking branch 'public/develop' into develop

Author: edb-slonik

product_docs/docs/efm/5/installing/prerequisites.mdx

@@ -101,11 +101,11 @@ The database user specified by the `db.user` property in the `efm.properties` fi
  `pg_wal_replay_pause()`
 
 
-If the `reconfigure.num.sync` or `reconfigure.sync.primary` property is set to `true`, then the db.user requires `pg_read_all_stats` privilege and permissions to run `pg_reload_conf()`.
+If the `reconfigure.num.sync` or `reconfigure.sync.primary` property is set to `true`, then the `db.user` requires pg_read_all_stats privilege and permissions to run `pg_reload_conf()`.
 
 For detailed information about each of these functions, see the [PostgreSQL core documentation](https://www.postgresql.org/docs/current/index.html).
 
-If the `update.physical.slots.period` property is used, then the db.user requires the `REPLICATION` privilege. A database superuser can provide the permissions needed:
+If the `update.physical.slots.period` property is used, then the db.user requires the REPLICATION privilege. A database superuser can provide the permissions needed:
 
 ```sql
 ALTER USER <user_name> REPLICATION;
@@ -117,4 +117,23 @@ The user must also have permissions to read the values of configuration variable
 GRANT pg_read_all_settings TO <user_name>;
 ```
 
-For more information about `pg_read_all_settings`, see the [PostgreSQL core documentation](https://www.postgresql.org/docs/current/default-roles.html).
+For more information about pg_read_all_settings, see the [PostgreSQL core documentation](https://www.postgresql.org/docs/current/default-roles.html).
+
+If `auto.rewind` is set to `true`, then the `db.user` requires the pg_checkpoint role to be granted, as the Failover Manager agent will issue a `CHECKPOINT` command prior to executing `pg_rewind`.
+
+The required privileges are summarized in this table:
+
+Privilege   | Object                 | Condition
+------------|------------------------|----------
+EXECUTE     | `pg_current_wal_lsn()` | Always required
+EXECUTE     | `pg_last_wal_replay_lsn()` | Always required
+EXECUTE     | `pg_wal_replay_resume()` | Always required
+EXECUTE     | `pg_wal_replay_pause()` | Always required
+EXECUTE     | `pg_reload_conf()` | When `reconfigure.num.sync` or `reconfigure.sync.primary` is `true`
+REPLICATION |  | When the `update.physical.slots.period` property is in effect (non-zero value)
+
+Role                  | Condition
+----------------------|----------
+pg_read_all_settings  | Always required
+pg_read_all_stats     | When `reconfigure.num.sync` or `reconfigure.sync.primary` is `true`
+pg_checkpoint         | When `auto.rewind` is set to `true`