SUPER Privilege

Overview

Grants ability to perform superuser operations, such as KILL, SET GLOBAL, and others.

USAGE

DETAILS

  • Scope: Global

  • Privilege name for GRANT: SUPER

  • Privilege name for REVOKE: SUPER

  • Privilege shown by SHOW GRANTS: SUPER

The SUPER privilege is intended for administrative users.

Depending on the Xpand version, users with the SUPER privilege are able to read and modify most or all objects in the database. When a user does not require this level of access, MariaDB recommends granting more fine-grained privileges to users.

Xpand 6.0 and Before

In Xpand 6.0 and before, the SUPER privilege implicitly includes the ALL [PRIVILEGES] privilege. When SUPER is granted to a user, that user effectively has all privileges on all database objects.

Xpand 6.1

Starting with Xpand 6.1, the privilege system allows for more fine-grained control, and the SUPER privilege has been redefined as a superset of several new privileges:

The SUPER privilege does not implicitly include the ALL [PRIVILEGES] privilege. If a user with SUPER privileges requires all privileges on all database objects, the user must also be granted the ALL [PRIVILEGES] privilege.

BINLOG ADMIN Privilege

Starting with Xpand 6.1, the SUPER privilege grants permission for all operations granted by the BINLOG ADMIN privilege, including:

CLUSTER ADMIN Privilege

Starting with Xpand 6.1, the SUPER privilege grants permission for all operations granted by the CLUSTER ADMIN privilege, including:

CONNECTION ADMIN Privilege

Starting with Xpand 6.1, the SUPER privilege grants permission for all operations granted by the CONNECTION ADMIN privilege, including:

REPAIR ADMIN Privilege

Starting with Xpand 6.1, the SUPER privilege grants permission for all operations granted by the REPAIR ADMIN privilege, including:

REPLICATION ADMIN Privilege

Starting with Xpand 6.1, the SUPER privilege grants permission for all operations granted by the REPLICATION ADMIN privilege, including:

SET USER Privilege

Starting with Xpand 6.1, the SUPER privilege grants permission for all operations granted by the SET USER privilege:

SYSTEM VARIABLES ADMIN Privilege

Starting with Xpand 6.1, the SUPER privilege grants permission for all operations granted by the SYSTEM VARIABLES ADMIN privilege:

SYNONYMS

SCHEMA

PARAMETERS

SKYSQL

PRIVILEGES

EXAMPLES

GRANT

The following examples demonstrate grant of a single privilege. A single GRANT statement can grant multiple privileges at the same scope by providing a comma-separated list of the privileges.

To grant the SUPER privilege at global scope, replace the user specification ('USERNAME'@'HOSTNAME') in the following query to align to your requirements:

GRANT SUPER
  ON *.*
  TO 'USERNAME'@'HOSTNAME';

For general guidance on privileges, see "Privileges".

REVOKE

The following examples demonstrate revoke of a single previously-granted privilege. A single REVOKE statement can revoke multiple privileges at the same scope by providing a comma-separated list of the privileges.

To revoke the SUPER privilege at global scope, replace the user specification ('USERNAME'@'HOSTNAME') in the following query to align to your requirements:

REVOKE SUPER
  ON *.*
  FROM 'USERNAME'@'HOSTNAME';

For general guidance on privileges, see "Privileges".

SHOW Output

A user's privileges can be displayed using the SHOW GRANTS statement.

If the SUPER privilege is present, it will be shown as SUPER in the output. For example:

SHOW GRANTS FOR 'app_user'@'192.0.2.%';
+----------------------------------------------+
| Grants for app_user@192.0.2.%                |
+----------------------------------------------+
| GRANT SUPER ON *.* TO 'app_user'@'192.0.2.%' |
+----------------------------------------------+

Privilege Failure

An error message is raised if an operation fails due to insufficient privileges. For example:

KILL 100;
ERROR 1045 (HY000): [11281] Permission denied: only global superusers can kill other user's processes; transaction aborted

ERROR HANDLING

FEATURE INTERACTION

RESPONSES

DIAGNOSIS

ISO 9075:2016

CHANGE HISTORY

Release Series

History

23.09

  • Present starting in MariaDB Xpand 23.09.1.

6.1

  • Present starting in MariaDB Xpand 6.1.0.

6.0

  • Present starting in MariaDB Xpand 6.0.3.

5.3

  • Present starting in MariaDB Xpand 5.3.13.

Release Series

History

6.0

  • Present starting in MariaDB Xpand 6.0.3.

5.3

  • Present starting in MariaDB Xpand 5.3.13.

Release Series

History

6.1

  • Present starting in MariaDB Xpand 6.1.0.

EXTERNAL REFERENCES