aws rds mariadb grant

rds instance 생성시 지정 한 관리계정이 admin 이라고 가정

show grants for admin;

결과

GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER ON *.* TO 'admin'@'%' IDENTIFIED BY PASSWORD '암호화된비번' WITH GRANT OPTION

 

admin 과 동일 한 권한의 새로운 계정 user1 을 만들려면

CREATE USER 'user1'@'%' IDENTIFIED BY '비번';

user1 에게 권한 부여

GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER ON *.* TO 'user1'@'%' WITH GRANT OPTION;

 

user1 에게 특정스키마.* to 'user1'@'%' 형태로 grant 하려면

global privileges 에 해당하는 옵션들을 제거해야 한다

GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON 스키마.* TO 'user1'@'%' WITH GRANT OPTION;

 

mariadb.com/kb/en/grant/#privilege-levels