REPLICATION ADMIN Privilege
This page is part of MariaDB's Documentation.
The parent of this page is: Privileges for MariaDB Xpand
Topics on this page:
Overview
In 23.09, 6.1:
Grants ability to execute
STOP REPLICA,STOP SLAVE,REPLICA STOP,SLAVE STOP,START REPLICA,START SLAVE,CHANGE MASTER TO,CHANGE REPLICA,CHANGE SLAVE,DROP REPLICA, andDROP SLAVE.
In 6.1:
Grants ability to execute
STOP REPLICA,STOP SLAVE,REPLICA STOP,SLAVE STOP,START REPLICA,START SLAVE,CHANGE MASTER TO,CHANGE REPLICA,CHANGE SLAVE,DROP REPLICA, andDROP SLAVE.
In 6.0, 5.3:
Not present
See also: Privileges for MariaDB Xpand 23.09, in 6.1, in 6.0, and in 5.3
See also: Privileges for MariaDB Xpand 6.1
DETAILS
Scope: Global
Privilege name for
GRANT:REPLICATION ADMINPrivilege name for
REVOKE:REPLICATION ADMINPrivilege shown by
SHOW GRANTS:REPLICATION ADMIN
The REPLICATION ADMIN privilege is supported starting with Xpand 6.1. It grants permission for the following operations:
The SUPER privilege is a superset of the REPLICATION ADMIN privilege.
EXAMPLES
GRANT
The following examples demonstrate grant of a single privilege. A single GRANT statement can grant multiple privileges at the same scope by providing a comma-separated list of the privileges.
To grant the REPLICATION ADMIN privilege at global scope, replace the user specification ('USERNAME'@'HOSTNAME') in the following query to align to your requirements:
GRANT REPLICATION ADMIN
ON *.*
TO 'USERNAME'@'HOSTNAME';
For general guidance on privileges, see "Privileges".
REVOKE
The following examples demonstrate revoke of a single previously-granted privilege. A single REVOKE statement can revoke multiple privileges at the same scope by providing a comma-separated list of the privileges.
To revoke the REPLICATION ADMIN privilege at global scope, replace the user specification ('USERNAME'@'HOSTNAME') in the following query to align to your requirements:
REVOKE REPLICATION ADMIN
ON *.*
FROM 'USERNAME'@'HOSTNAME';
For general guidance on privileges, see "Privileges".
SHOW Output
A user's privileges can be displayed using the SHOW GRANTS statement.
If the REPLICATION ADMIN privilege is present, it will be shown as REPLICATION ADMIN in the output. For example:
SHOW GRANTS FOR 'app_user'@'192.0.2.%';
+----------------------------------------------------------+
| Grants for app_user@192.0.2.% |
+----------------------------------------------------------+
| GRANT REPLICATION ADMIN ON *.* TO 'app_user'@'192.0.2.%' |
+----------------------------------------------------------+
Privilege Failure
An error message is raised if an operation fails due to insufficient privileges. For example:
STOP REPLICA;
ERROR 1045 (HY000): [11281] Permission denied: User "'USERNAME'@'HOSTNAME'" is missing REPLICATION ADMIN on *.*; transaction aborted
CHANGE HISTORY
Release Series | History |
|---|---|
23.09 |
|
6.1 |
|
6.0 |
|
5.3 |
|
Release Series | History |
|---|---|
6.1 |
|