Manage users

Users are accounts of the cluster, kept in the dictionary. They are not Linux or MariaDB accounts.

Create, change, drop

create user NAME identified by 'PASSWORD';
alter user NAME identified by 'PASSWORD';
drop user NAME [cascade];

• The password is between single quotes: at most 31 characters, no space, no tab, no quote and no backslash.
• Only an administrator can run these commands. An ordinary user cannot change its own password.
• Without identified by, the account is created but cannot connect.
• drop user refuses to remove a user who owns tables. With cascade, the user and all their tables are removed.
• None of them works while the cluster is locked.
• The installation creates the account system, an administrator. Change its password at once.

Groups

An account is in the group users or admin. Administrators can do everything. grant dba to NAME; moves a user to the group admin; revoke dba from NAME; moves it back. An administrator cannot revoke their own DBA privilege.

Privileges on tables

grant PRIVILEGE on TABLE to USER;
revoke PRIVILEGE on TABLE from USER;

The privileges are ALL, ALTER, DELETE, DROP, DUMP, EXECUTE, INSERT, LOCK, SELECT, TRUNCATE and UPDATE. The owner of a table and the administrators can grant them.

Look at the accounts

show users;
show grants for NAME;
show connections;