SYSTEM VARIABLES ADMIN Privilege

GRANT

The following examples demonstrate grant of a single privilege. A single GRANT statement can grant multiple privileges at the same scope by providing a comma-separated list of the privileges.

To grant the SYSTEM VARIABLES ADMIN privilege at global scope, replace the user specification ('USERNAME'@'HOSTNAME') in the following query to align to your requirements:

GRANT SYSTEM VARIABLES ADMIN
  ON *.*
  TO 'USERNAME'@'HOSTNAME';

REVOKE

The following examples demonstrate revoke of a single previously-granted privilege. A single REVOKE statement can revoke multiple privileges at the same scope by providing a comma-separated list of the privileges.

To revoke the SYSTEM VARIABLES ADMIN privilege at global scope, replace the user specification ('USERNAME'@'HOSTNAME') in the following query to align to your requirements:

REVOKE SYSTEM VARIABLES ADMIN
  ON *.*
  FROM 'USERNAME'@'HOSTNAME';

SHOW Output

A user's privileges can be displayed using the SHOW GRANTS statement.

If the SYSTEM VARIABLES ADMIN privilege is present, it will be shown as SYSTEM VARIABLES ADMIN in the output. For example:

SHOW GRANTS FOR 'app_user'@'192.0.2.%';

+---------------------------------------------------------------+
| Grants for app_user@192.0.2.%                                 |
+---------------------------------------------------------------+
| GRANT SYSTEM VARIABLES ADMIN ON *.* TO 'app_user'@'192.0.2.%' |
+---------------------------------------------------------------+

Privilege Failure

An error message is raised if an operation fails due to insufficient privileges. For example:

SET GLOBAL max_connections=1000;

ERROR 1045 (HY000): [11281] Permission denied: User "'USERNAME'@'HOSTNAME'" is missing SYSTEM VARIABLES ADMIN on *.*; transaction aborted