The method of creating a MySQL user and assigning permissions is as follows: 1. Create a user using the CREATE USER statement in the format CREATE USER 'username'@'host' IDENTIFIED BY 'password', for example CREATE USER 'dev_user'@'%' IDENTIFIED BY 'securePass123'; 2. Use the GRANT command to assign permissions, such as GRANT ALL PRIVILEGES ON project_db. TO 'dev_user'@'%' to assign all permissions, or GRANT SELECT, INSERT, UPDATE ON project_db.Specify read and write permissions; 3. Execute FLUSH PRIVILEGES to make the permissions effective immediately; precautions include using high-permission accounts to operate, carefully granting GRANT OPTION, setting strong passwords, and paying attention to the restrictions of hosting services.
Creating a user in MySQL and assigning the right privileges is one of the basic but essential tasks, especially when managing databases for applications or multiple users. It helps maintain security by ensuring that each user only has access to what they really need.

How to Create a User in MySQL
To create a new user in MySQL, you use the CREATE USER
statement. The basic syntax looks like this:

CREATE USER 'username'@'host' IDENTIFIED BY 'password';
- username is the name you want to assign to the new user.
- host specifies which host the user can connect from. Using
'%'
means the user can connect from any host. - password is the password for the user.
For example, to create a user named dev_user
who can connect from anywhere with the password securePass123
, you'd run:
CREATE USER 'dev_user'@'%' IDENTIFIED BY 'securePass123';
You can also skip the password part if you're using an authentication plugin, but that's more advanced and not typical for most settings.

Common Privileges You Can Grant
MySQL offers a wide range of privileges, but here are some of the most commonly used ones:
-
SELECT
– allows reading data -
INSERT
– allows inserting new data -
UPDATE
– allows updating existing data -
DELETE
– allows deleting data -
CREATE
– allows creating new tables or databases -
DROP
– allows deleting tables or databases -
GRANT OPTION
– allows granting or removing privileges from other users
You don't usually give all these privileges unless it's a super admin account. Most of the time, apps or developers only need a subset.
How to Grant Privileges to a User
Once the user is created, you can assign privileges using the GRANT
command. The general structure is:
GRANT privilege_type ON database_name.table_name TO 'username'@'host';
For example, if you want to give the dev_user
full access to a specific database called project_db
, you'd run:
GRANT ALL PRIVILEGES ON project_db.* TO 'dev_user'@'%';
If you only want to allow read and write access on all tables:
GRANT SELECT, INSERT, UPDATE ON project_db.* TO 'dev_user'@'%';
After granting privileges, always remember to reload the grant tables so the changes take effect immediately:
FLUSH PRIVILEGES;
This step is easy to forget, especially if you're just starting out.
A Few Things to Keep in Mind
- Make sure you're logged in as a user with enough privileges (like root) when creating users or granting access.
- Be cautious with the
GRANT OPTION
. Giving it to non-admin users can lead to accidental privilege escalation. - Always secure your passwords. Use strong, unique passwords for each database user.
- If you're using a managed service like AWS RDS or Google Cloud SQL, some commands may behave differently or be restricted.
Basically that's it. Creating a user and setting up their access rights doesn't have to be complicated — just make sure you understand what each privilege does and apply the principle of least privilege.
The above is the detailed content of mysql tutorial on creating a user and granting privileges. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

GTID (Global Transaction Identifier) ??solves the complexity of replication and failover in MySQL databases by assigning a unique identity to each transaction. 1. It simplifies replication management, automatically handles log files and locations, allowing slave servers to request transactions based on the last executed GTID. 2. Ensure consistency across servers, ensure that each transaction is applied only once on each server, and avoid data inconsistency. 3. Improve troubleshooting efficiency. GTID includes server UUID and serial number, which is convenient for tracking transaction flow and accurately locate problems. These three core advantages make MySQL replication more robust and easy to manage, significantly improving system reliability and data integrity.

MySQL main library failover mainly includes four steps. 1. Fault detection: Regularly check the main library process, connection status and simple query to determine whether it is downtime, set up a retry mechanism to avoid misjudgment, and can use tools such as MHA, Orchestrator or Keepalived to assist in detection; 2. Select the new main library: select the most suitable slave library to replace it according to the data synchronization progress (Seconds_Behind_Master), binlog data integrity, network delay and load conditions, and perform data compensation or manual intervention if necessary; 3. Switch topology: Point other slave libraries to the new master library, execute RESETMASTER or enable GTID, update the VIP, DNS or proxy configuration to

The steps to connect to the MySQL database are as follows: 1. Use the basic command format mysql-u username-p-h host address to connect, enter the username and password to log in; 2. If you need to directly enter the specified database, you can add the database name after the command, such as mysql-uroot-pmyproject; 3. If the port is not the default 3306, you need to add the -P parameter to specify the port number, such as mysql-uroot-p-h192.168.1.100-P3307; In addition, if you encounter a password error, you can re-enter it. If the connection fails, check the network, firewall or permission settings. If the client is missing, you can install mysql-client on Linux through the package manager. Master these commands

InnoDB is MySQL's default storage engine because it outperforms other engines such as MyISAM in terms of reliability, concurrency performance and crash recovery. 1. It supports transaction processing, follows ACID principles, ensures data integrity, and is suitable for key data scenarios such as financial records or user accounts; 2. It adopts row-level locks instead of table-level locks to improve performance and throughput in high concurrent write environments; 3. It has a crash recovery mechanism and automatic repair function, and supports foreign key constraints to ensure data consistency and reference integrity, and prevent isolated records and data inconsistencies.

IndexesinMySQLimprovequeryspeedbyenablingfasterdataretrieval.1.Theyreducedatascanned,allowingMySQLtoquicklylocaterelevantrowsinWHEREorORDERBYclauses,especiallyimportantforlargeorfrequentlyqueriedtables.2.Theyspeedupjoinsandsorting,makingJOINoperation

MySQL's default transaction isolation level is RepeatableRead, which prevents dirty reads and non-repeatable reads through MVCC and gap locks, and avoids phantom reading in most cases; other major levels include read uncommitted (ReadUncommitted), allowing dirty reads but the fastest performance, 1. Read Committed (ReadCommitted) ensures that the submitted data is read but may encounter non-repeatable reads and phantom readings, 2. RepeatableRead default level ensures that multiple reads within the transaction are consistent, 3. Serialization (Serializable) the highest level, prevents other transactions from modifying data through locks, ensuring data integrity but sacrificing performance;

MySQL transactions follow ACID characteristics to ensure the reliability and consistency of database transactions. First, atomicity ensures that transactions are executed as an indivisible whole, either all succeed or all fail to roll back. For example, withdrawals and deposits must be completed or not occur at the same time in the transfer operation; second, consistency ensures that transactions transition the database from one valid state to another, and maintains the correct data logic through mechanisms such as constraints and triggers; third, isolation controls the visibility of multiple transactions when concurrent execution, prevents dirty reading, non-repeatable reading and fantasy reading. MySQL supports ReadUncommitted and ReadCommi.

To add MySQL's bin directory to the system PATH, it needs to be configured according to the different operating systems. 1. Windows system: Find the bin folder in the MySQL installation directory (the default path is usually C:\ProgramFiles\MySQL\MySQLServerX.X\bin), right-click "This Computer" → "Properties" → "Advanced System Settings" → "Environment Variables", select Path in "System Variables" and edit it, add the MySQLbin path, save it and restart the command prompt and enter mysql--version verification; 2.macOS and Linux systems: Bash users edit ~/.bashrc or ~/.bash_
