SUPER Privilege
This page is part of MariaDB's Documentation.
The parent of this page is: Privileges for MariaDB Xpand
Topics on this page:
Overview
Grants ability to perform superuser operations, such as KILL, SET GLOBAL, and others.
DETAILS
Scope: Global
Privilege name for
GRANT:SUPERPrivilege name for
REVOKE:SUPERPrivilege shown by
SHOW GRANTS:SUPER
EXAMPLES
GRANT
The following examples demonstrate grant of a single privilege. A single GRANT statement can grant multiple privileges at the same scope by providing a comma-separated list of the privileges.
To grant the SUPER privilege at global scope, replace the user specification ('USERNAME'@'HOSTNAME') in the following query to align to your requirements:
GRANT SUPER
ON *.*
TO 'USERNAME'@'HOSTNAME';
REVOKE
The following examples demonstrate revoke of a single previously-granted privilege. A single REVOKE statement can revoke multiple privileges at the same scope by providing a comma-separated list of the privileges.
To revoke the SUPER privilege at global scope, replace the user specification ('USERNAME'@'HOSTNAME') in the following query to align to your requirements:
REVOKE SUPER
ON *.*
FROM 'USERNAME'@'HOSTNAME';
SHOW Output
A user's privileges can be displayed using the SHOW GRANTS statement.
If the SUPER privilege is present, it will be shown as SUPER in the output. For example:
SHOW GRANTS FOR 'app_user'@'192.0.2.%';
+----------------------------------------------+
| Grants for app_user@192.0.2.% |
+----------------------------------------------+
| GRANT SUPER ON *.* TO 'app_user'@'192.0.2.%' |
+----------------------------------------------+
Privilege Failure
An error message is raised if an operation fails due to insufficient privileges. For example:
KILL 100;
ERROR 1045 (HY000): [11281] Permission denied: only global superusers can kill other user's processes; transaction aborted