By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

MySQL on RDS another account with root privileges

0

Is there any option to grant SUPER privileges to another user? When i try to do it using MySQL CLI i get an error and i found many posts that this is impossible but there is no workaround proposed.

We have few database engineers and we want separate accounts for them, so far we are unable to do so as we cannot grant them all privileges and for example they are unable to edit procedures.

log_bin_trust_function_creators set to 1 is working only for the root user.

Any solutions for this issue?

Topics
Migration & ModernizationAnalyticsDatabase
Tags
Amazon Relational Database ServiceDatabase
Language
English
Dataedo
asked a year ago397 views
1 Answer
0

This Premium Support Post: How do I create another master user for my Amazon RDS DB instance that is running MySQL? answers the question I think. To recap here:

  1. Create a user: CREATE USER 'new_master_user'@'%' IDENTIFIED BY 'password';.
  2. Grant permissions to the new user: GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER ON *.* TO 'new_master_user'@'%' WITH GRANT OPTION;

Accessing or using the true admin user (rdsadmin) is not allowed even for the master user created in the database. You can't replicate some of the permissions used by this user either.

C Mencarelli
answered a year ago
profile pictureAWS
EXPERT
Brettski-AWS
reviewed a year ago
  • Dataedo
    a year ago

    Ok, but this is creation of standard user, as I mentioned we want to grant SUPER to other accounts, so this is not solving our issue.

  • Dataedo
    a year ago

    Just to add, master user permissions will be enough, as looks like it's enough to manage procedures

  • C Mencarelli
    a year ago

    Your question specifies root privilege, as I mention in the answer, this is not possible. However the answer I provided will get you exactly the same permission set that is granted to the user that is created with the database and given to you to use as a db user. Can you share the sql and error you're getting?

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content