Manage MySQL user accounts, roles, and fine-grained permissions.

Create a User

CREATE USER 'devuser'@'localhost' IDENTIFIED BY 'SecurePass!';
-- Allow connections from any host (use carefully)
CREATE USER 'devuser'@'%' IDENTIFIED BY 'SecurePass!';

Grant Permissions

-- Full access to one database
GRANT ALL PRIVILEGES ON mydb.* TO 'devuser'@'localhost';

-- Read-only access
GRANT SELECT ON mydb.* TO 'readonly'@'localhost';

-- Specific table permissions
GRANT SELECT, INSERT ON mydb.users TO 'appuser'@'localhost';

-- Apply changes
FLUSH PRIVILEGES;

View User Permissions

-- Show grants for a specific user
SHOW GRANTS FOR 'devuser'@'localhost';

-- List all users
SELECT user, host, authentication_string FROM mysql.user;

Revoke Permissions

REVOKE INSERT ON mydb.* FROM 'devuser'@'localhost';
REVOKE ALL PRIVILEGES ON mydb.* FROM 'devuser'@'localhost';
FLUSH PRIVILEGES;

Change Password

ALTER USER 'devuser'@'localhost' IDENTIFIED BY 'NewStrongerPass!';
FLUSH PRIVILEGES;

Delete a User

DROP USER 'devuser'@'localhost';

Privilege Levels Reference

• ALL PRIVILEGES — full access
• SELECT — read data
• INSERT — add rows
• UPDATE — modify rows
• DELETE — remove rows
• CREATE — create tables/databases
• DROP — delete tables/databases
• INDEX — manage indexes
• GRANT OPTION — can grant their own privileges to others