MySQL Users, Grants, and Privileges Cheatsheet

CREATE USER 'app_user'@'%' IDENTIFIED BY 'replace-with-strong-password';

# Create an account identified by user name and host.

ALTER USER 'app_user'@'%' IDENTIFIED BY 'new-strong-password';

# Rotate credentials for an existing account.

DROP USER IF EXISTS 'old_user'@'%';

# Remove an account from the server.

SELECT USER(), CURRENT_USER();

# Inspect who MySQL believes you are.

SELECT user, host FROM mysql.user ORDER BY user, host;

# Display existing accounts.

GRANT SELECT, INSERT, UPDATE, DELETE ON app_db.* TO 'app_user'@'%';

# Allow an app account to use one schema.

GRANT ALL PRIVILEGES ON app_db.* TO 'admin_user'@'%';

# Give broad schema-level rights.

SHOW GRANTS FOR 'app_user'@'%';

# Inspect the effective privileges granted to an account.

REVOKE DELETE ON app_db.* FROM 'app_user'@'%';

# Remove previously granted rights.

FLUSH PRIVILEGES;

# Refresh privilege data after direct system-table changes.