Multiple users with different permissions can be created to access a DB instance or database, but the permissions of these users must be within the range of the account permissions.
In the user list, you can view all created users, or locate a user and click Edit and Delete in the Operation column to manage it.
Table 1 describes the user permissions briefly. For details about permission usages and explanations, visit the official website.
Permission |
Description |
---|---|
SELECT |
Permission to query a specified object, for example, a global or single database. |
INSERT |
Permission to insert data into a specified object. |
UPDATE |
Permission to update data of a specified object. |
DELETE |
Permission to delete data from a specified object. |
CREATE |
Permission to create databases and tables for a specified object. |
DROP |
Permission to delete databases, tables, and views of a specified object. |
RELOAD |
Permission to execute FLUSH. |
PROCESS |
Permission to execute SHOW PROCESSLIST to view all the processes. |
GRANT |
Permission to grant a specified object the permissions of another account or reclaim permissions from other accounts. |
REFERENCES |
Permission to create foreign keys for a specified object. |
INDEX |
Permission to create or delete index for a specified object. |
ALTER |
Permission to execute ALTER TABLE for a specified object. |
SHOW DATABASES |
Permission to run the SHOW DATABASES command to show all databases. |
CREATE TEMPORARY TABLES |
Permission to execute CREATE TEMPORARY TABLE for a specified object. |
LOCK TABLES |
Permission to execute LOCK TABLES on the tables with the SELECT permission for a specified object. |
EXECUTE |
Permission to execute a stored procedure for a specified object. |
REPLICATION SLAVE |
Permission to allow the replica server to read binary log events from the source server. |
REPLICATION CLIENT |
Permission to query the location of the source server or replica server. |
CREATE VIEW |
Permission to create or alter a view for a specified object. |
SHOW VIEW |
Permission to execute SHOW CREATE VIEW for a specified object. |
CREATE ROUTINE |
Permission to create a stored procedure for a specified object. |
ALTER ROUTINE |
Permission to alter or delete a stored procedure for a specified object. |
CREATE USER |
Permission to execute CREATE USER, DROP USER, RENAME USER, and REVOKE ALL PRIVILEGES for a specified object. |
EVENT |
Permission to create, modify, delete, or display the event scheduler for a specified object. |
TRIGGER |
Permission to execute a trigger for a specified object. Only users with this permission can create, delete, execute, or display triggers of the table. |