Use um cliente de linha de comando, como cliente MySQL ou Shell MySQL, para listar os privilégios concedidos a um usuário.

1. Execute uma das ações a seguir para listar os privilégios concedidos a um usuário:
   • Para exibir os privilégios concedidos ao usuário atual, execute o seguinte comando:

     SHOW GRANTS \G

   • Para exibir os privilégios concedidos a um usuário nomeado, execute o seguinte comando:

     SHOW GRANTS FOR <Username> \G

   Se o comando tiver sido executado para um usuário administrador, User001, o comando retornará o seguinte:

   *************************** 1. row ***************************
   Grants for User001@%: GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, 
   PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES, 
   LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, 
   SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER, 
   CREATE ROLE, DROP ROLE ON *.* TO `User001`@`%` WITH GRANT OPTION
   *************************** 2. row ***************************
   Grants for User001@%: GRANT APPLICATION_PASSWORD_ADMIN,AUDIT_ADMIN,BACKUP_ADMIN,
   CONNECTION_ADMIN,EXPORT_QUERY_RESULTS,FLUSH_OPTIMIZER_COSTS,FLUSH_PRIVILEGES,
   FLUSH_STATUS,FLUSH_TABLES,FLUSH_USER_RESOURCES,OPTION_TRACKER_OBSERVER,
   REPLICATION_APPLIER,ROLE_ADMIN,SET_ANY_DEFINER,SHOW_ROUTINE,TRANSACTION_GTID_TAG,
   VECTOR_STORE_LOAD_EXEC,XA_RECOVER_ADMIN ON *.* TO `User001`@`%` WITH GRANT OPTION
   *************************** 3. row ***************************
   Grants for admin@%: GRANT CREATE TEMPORARY TABLES ON `sys`.* TO `admin`@`%` 
   WITH GRANT OPTION
   *************************** 4. row ***************************
   Grants for User001@%: REVOKE INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, 
   INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW,
    CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON `mysql`.* FROM `User001`@`%`
   *************************** 5. row ***************************
   Grants for User001@%: REVOKE CREATE, DROP, REFERENCES, INDEX, ALTER, 
   CREATE TEMPORARY TABLES, LOCK TABLES, CREATE VIEW, CREATE ROUTINE, 
   ALTER ROUTINE, EVENT, TRIGGER ON `mysql_audit`.* FROM `User001`@`%`
   *************************** 6. row ***************************
   Grants for User001@%: REVOKE INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, 
   INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, 
   CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON `mysql_option`.* FROM `User001`@`%`
   *************************** 7. row ***************************
   Grants for User001@%: REVOKE INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, INDEX, 
   ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, CREATE ROUTINE, 
   ALTER ROUTINE, EVENT, TRIGGER ON `mysql_rest_service_metadata`.* FROM FROM `User001`@`%`
   *************************** 8. row ***************************
   Grants for User001@%: REVOKE CREATE, DROP, REFERENCES, INDEX, ALTER, 
   CREATE TEMPORARY TABLES, LOCK TABLES, CREATE VIEW, CREATE ROUTINE, ALTER ROUTINE, 
   EVENT, TRIGGER ON `mysql_tasks`.* FROM FROM `User001`@`%`
   *************************** 9. row ***************************
   Grants for User001@%: REVOKE CREATE, DROP, REFERENCES, INDEX, ALTER, LOCK TABLES, 
   CREATE VIEW, CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON `sys`.* FROM `User001`@`%`
   *************************** 10. row ***************************
   Grants for User001@%: GRANT PROXY ON ``@`` TO `User001`@`%` WITH GRANT OPTION
   *************************** 11. row ***************************
   Grants for User001@%: GRANT `administrator`@`%` TO `User001`@`%` WITH ADMIN OPTION
   8 rows in set (0.11 sec)

   As linhas correspondem ao seguinte:

   • Linha 1: Privilégios estáticos globais concedidos.
   • Linha 2: Privilégios dinâmicos globais concedidos.
   • Linha 3: Privilégios concedidos no esquema sys
   • Linha 4: Privileges revogados do esquema mysql.
   • Linha 5: Privilégios revogados do esquema mysql_audit.
   • Linha 6: (MySQL 9.1.0 ou mais recente somente) Privilégios revogados do esquema mysql_option.
   • Linha 7: (MySQL 9.3.1 ou posterior somente com REST ativado) Privilégios revogados do esquema mysql_rest_service_metadata
   • Linha 8: (MySQL 9.3.1 ou mais recente somente) Privilégios revogados do esquema mysql_tasks
   • Linha 9: Privilégios revogados do esquema sys.
   • Linha 10: Usuários de proxy.
   • Linha 11: Funções concedidas.

Determinados privilégios MySQL estáticos globais são concedidos ao administrador do sistema de banco de dados.

Determinados privilégios globais do MySQL dinâmico são concedidos ao administrador do sistema de banco de dados.

Determinados privilégios são concedidos no esquema sys ao administrador do sistema de banco de dados.

Determinados privilégios são revogados do esquema mysql. Não é possível conceder esses privilégios a qualquer usuário do sistema de banco de dados.

Determinados privilégios são revogados do esquema mysql_audit. Não é possível conceder esses privilégios a qualquer usuário do sistema de banco de dados.

Em MySQL 9.1.0 ou superior, determinados privilégios são revogados do esquema mysql_option. Não é possível conceder esses privilégios a qualquer usuário do sistema de banco de dados.

No MySQL 9.3.1 ou superior com o REST ativado, determinados privilégios são revogados do esquema mysql_rest_service_metadata. Não é possível conceder esses privilégios a qualquer usuário do sistema de banco de dados.

No MySQL 9.3.1 ou superior, determinados privilégios são revogados do esquema mysql_tasks. Não é possível conceder esses privilégios a qualquer usuário do sistema de banco de dados.

Determinados privilégios são revogados do esquema sys. Não é possível conceder esses privilégios a qualquer usuário do sistema de banco de dados.

Determinadas atribuições do usuário MySQL são concedidas ao administrador do sistema de banco de dados.

SHOW GRANTS FOR administrator \G
*************************** 1. row ***************************
Grants for administrator@%: GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, 
PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES, 
LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, 
SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER, 
CREATE ROLE, DROP ROLE ON *.* TO `administrator`@`%` WITH GRANT OPTION
*************************** 2. row ***************************
Grants for administrator@%: GRANT APPLICATION_PASSWORD_ADMIN,AUDIT_ADMIN,BACKUP_ADMIN,
CONNECTION_ADMIN,FLUSH_OPTIMIZER_COSTS,FLUSH_STATUS,FLUSH_TABLES,FLUSH_USER_RESOURCES,
OPTION_TRACKER_OBSERVER,REPLICATION_APPLIER,ROLE_ADMIN,SET_ANY_DEFINER,SHOW_ROUTINE,
TRANSACTION_GTID_TAG,XA_RECOVER_ADMIN ON *.* TO `administrator`@`%` WITH GRANT OPTION
*************************** 3. row ***************************
Grants for administrator@%: REVOKE INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, 
INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, 
CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON `mysql`.* FROM `administrator`@`%`
*************************** 4. row ***************************
Grants for administrator@%: REVOKE CREATE, DROP, REFERENCES, INDEX, ALTER, 
CREATE TEMPORARY TABLES, LOCK TABLES, CREATE VIEW, CREATE ROUTINE, ALTER ROUTINE, 
EVENT, TRIGGER ON `mysql_audit`.* FROM `administrator`@`%`
*************************** 5. row ***************************
Grants for administrator@%: REVOKE INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, 
INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, CREATE ROUTINE, 
ALTER ROUTINE, EVENT, TRIGGER ON `mysql_option`.* FROM `administrator`@`%`
*************************** 6. row ***************************
Grants for administrator@%: REVOKE CREATE, DROP, REFERENCES, INDEX, ALTER, 
CREATE TEMPORARY TABLES, LOCK TABLES, CREATE VIEW, CREATE ROUTINE, ALTER ROUTINE, 
EVENT, TRIGGER ON `sys`.* FROM `administrator`@`%`
6 rows in set (0.00 sec)

Use um cliente de linha de comando, como MySQL Client ou MySQL Shell, para criar administradores adicionais do sistema de banco de dados.

1. Conecte-se ao sistema de banco de dados com a credencial de um administrador de sistema de banco de dados usando um cliente de linha de comando, como cliente MySQL ou Shell MySQL.
2. Execute o seguinte comando para criar outro administrador do sistema de BD:

   CREATE USER <admin_user_name> IDENTIFIED BY '<password>' DEFAULT ROLE 'administrator';
   GRANT PROXY ON ``@`` TO <admin_user_name> WITH GRANT OPTION; 

3. (Opcional) Execute o seguinte comando para listar os privilégios concedidos à nova conta de usuário:

   SHOW GRANTS FOR <admin_user_name> \G

   A saída mostra:

   *************************** 1. row ***************************
   Grants for <admin_user_name>@%: GRANT USAGE ON *.* TO `<admin_user_name>`@`%` WITH GRANT OPTION
   *************************** 2. row ***************************
   Grants for <admin_user_name>@%: GRANT PROXY ON ``@`` TO `<admin_user_name>`@`%` WITH GRANT OPTION
   *************************** 3. row ***************************
   Grants for <admin_user_name>@%: GRANT `administrator`@`%` TO `<admin_user_name>`@`%`
   3 rows in set (0.00 sec)

4. (Opcional) Conecte-se ao sistema de banco de dados com a credencial do novo administrador usando um cliente de linha de comando e execute o seguinte para listar os privilégios:

   SHOW GRANTS \G

   A saída mostra:

   *************************** 1. row ***************************
   Grants for <admin_user_name>@%: GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, 
   PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES, LOCK TABLES, 
   EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, 
   ALTER ROUTINE, CREATE USER, EVENT, TRIGGER, CREATE ROLE, DROP ROLE ON *.* 
   TO `<admin_user_name>`@`%` WITH GRANT OPTION
   *************************** 2. row ***************************
   Grants for <admin_user_name>@%: GRANT APPLICATION_PASSWORD_ADMIN,AUDIT_ADMIN,
   BACKUP_ADMIN,CONNECTION_ADMIN,FLUSH_OPTIMIZER_COSTS,FLUSH_STATUS,FLUSH_TABLES,
   FLUSH_USER_RESOURCES,OPTION_TRACKER_OBSERVER,REPLICATION_APPLIER,ROLE_ADMIN,SET_ANY_DEFINER,SHOW_ROUTINE,
   TRANSACTION_GTID_TAG,XA_RECOVER_ADMIN ON *.* TO `<admin_user_name>`@`%` WITH GRANT OPTION
   *************************** 3. row ***************************
   Grants for <admin_user_name>@%: REVOKE INSERT, UPDATE, DELETE, CREATE, DROP, 
   REFERENCES, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, 
   CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON `mysql`.* FROM `<admin_user_name>`@`%`
   *************************** 4. row ***************************
   Grants for <admin_user_name>@%: REVOKE CREATE, DROP, REFERENCES, INDEX, ALTER, 
   CREATE TEMPORARY TABLES, LOCK TABLES, CREATE VIEW, CREATE ROUTINE, ALTER ROUTINE, 
   EVENT, TRIGGER ON `mysql_audit`.* FROM `<admin_user_name>`@`%`
   *************************** 5. row ***************************
   Grants for <admin_user_name>@%: REVOKE INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, 
   INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, CREATE ROUTINE, ALTER ROUTINE, 
   EVENT, TRIGGER ON `mysql_option`.* FROM `<admin_user_name>`@`%`
   *************************** 6. row ***************************
   Grants for <admin_user_name>@%: REVOKE CREATE, DROP, REFERENCES, INDEX, ALTER, 
   CREATE TEMPORARY TABLES, LOCK TABLES, CREATE VIEW, CREATE ROUTINE, ALTER ROUTINE, 
   EVENT, TRIGGER ON `sys`.* FROM `<admin_user_name>`@`%`
   *************************** 7. row ***************************
   Grants for <admin_user_name>@%: GRANT PROXY ON ``@`` TO `<admin_user_name>`@`%` WITH GRANT OPTION
   *************************** 8. row ***************************
   Grants for <admin_user_name>@%: GRANT `administrator`@`%` TO `<admin_user_name>`@`%`
   8 rows in set (0.00 sec)