MySQL on RDS another account with root privileges

0

Is there any option to grant SUPER privileges to another user? When i try to do it using MySQL CLI i get an error and i found many posts that this is impossible but there is no workaround proposed.

We have few database engineers and we want separate accounts for them, so far we are unable to do so as we cannot grant them all privileges and for example they are unable to edit procedures.

log_bin_trust_function_creators set to 1 is working only for the root user.

Any solutions for this issue?

Dataedo
posta un anno fa459 visualizzazioni
1 Risposta
0

This Premium Support Post: How do I create another master user for my Amazon RDS DB instance that is running MySQL? answers the question I think. To recap here:

  1. Create a user: CREATE USER 'new_master_user'@'%' IDENTIFIED BY 'password';.
  2. Grant permissions to the new user: GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER ON *.* TO 'new_master_user'@'%' WITH GRANT OPTION;

Accessing or using the true admin user (rdsadmin) is not allowed even for the master user created in the database. You can't replicate some of the permissions used by this user either.

con risposta un anno fa
profile pictureAWS
ESPERTO
verificato un anno fa
  • Ok, but this is creation of standard user, as I mentioned we want to grant SUPER to other accounts, so this is not solving our issue.

  • Just to add, master user permissions will be enough, as looks like it's enough to manage procedures

  • Your question specifies root privilege, as I mention in the answer, this is not possible. However the answer I provided will get you exactly the same permission set that is granted to the user that is created with the database and given to you to use as a db user. Can you share the sql and error you're getting?

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande