Creating users in MySQL

Introduction

Creating users lets you control who can access your database. It helps keep your data safe and organized.

When you want to give a new person access to your database.

When you need to separate access rights for different team members.

When setting up a new application that needs to connect to the database.

When you want to restrict what certain users can do in the database.

Syntax

MySQL

CREATE USER 'username'@'host' IDENTIFIED BY 'password';

Replace 'username' with the name you want for the user.

'host' is where the user can connect from, often 'localhost' for the same machine.

Examples

This creates a user named 'alice' who can connect only from the local computer.

MySQL

CREATE USER 'alice'@'localhost' IDENTIFIED BY 'mypassword';

This creates a user named 'bob' who can connect from any computer.

MySQL

CREATE USER 'bob'@'%' IDENTIFIED BY 'secure123';

Sample Program

This creates a user 'john' who can connect from the local machine, then shows what permissions he has (none by default).

MySQL

CREATE USER 'john'@'localhost' IDENTIFIED BY 'johnspass';
SHOW GRANTS FOR 'john'@'localhost';

Important Notes

After creating a user, you usually need to give them permissions with GRANT.

Passwords should be strong to keep your database secure.

Use SHOW GRANTS FOR 'username'@'host'; to check a user's permissions.

Summary

Creating users controls who can access your database.

Use CREATE USER 'name'@'host' IDENTIFIED BY 'password'; to add a user.

Remember to assign permissions after creating the user.

Practice

1. What is the main purpose of the CREATE USER statement in MySQL?

easy

A. To add a new user who can access the database

B. To delete an existing user

C. To change the password of a user

D. To list all users in the database

Solution

1. Step 1: Understand the purpose of CREATE USER

   The CREATE USER command is used to add a new user account to the MySQL server.

2. Step 2: Differentiate from other user commands

   Deleting users uses DROP USER, changing passwords uses ALTER USER, and listing users requires querying system tables.

3. Final Answer:

   To add a new user who can access the database -> Option A

4. Quick Check:

   CREATE USER adds users [OK]

Hint: Remember: CREATE USER adds, DROP USER removes [OK]

Common Mistakes:

• Confusing CREATE USER with DROP USER
• Thinking CREATE USER changes passwords
• Assuming CREATE USER lists users

2. Which of the following is the correct syntax to create a user named 'alice' who can connect from any host with password 'mypassword'?

easy

A. CREATE USER 'alice'@'localhost' PASSWORD 'mypassword';

B. CREATE USER alice IDENTIFIED BY 'mypassword';

C. CREATE USER 'alice'@'%' IDENTIFIED BY 'mypassword';

D. CREATE USER 'alice' IDENTIFIED WITH 'mypassword';

Solution

1. Step 1: Check the correct syntax for user creation

   The correct syntax includes the username in quotes, the host in quotes after @, and the password set with IDENTIFIED BY.

2. Step 2: Validate each option

   CREATE USER 'alice'@'%' IDENTIFIED BY 'mypassword'; uses 'alice'@'%' which means any host, and IDENTIFIED BY 'mypassword' is correct. CREATE USER alice IDENTIFIED BY 'mypassword'; misses the host part. CREATE USER 'alice' IDENTIFIED WITH 'mypassword'; uses IDENTIFIED WITH which is incorrect here. CREATE USER 'alice'@'localhost' PASSWORD 'mypassword'; uses PASSWORD keyword incorrectly.

3. Final Answer:

   CREATE USER 'alice'@'%' IDENTIFIED BY 'mypassword'; -> Option C

4. Quick Check:

   Correct syntax includes user@host and IDENTIFIED BY [OK]

Hint: User must have 'user'@'host' and IDENTIFIED BY password [OK]

Common Mistakes:

• Omitting the host part after username
• Using PASSWORD instead of IDENTIFIED BY
• Using IDENTIFIED WITH incorrectly

3. What will happen if you run this command?

CREATE USER 'bob'@'localhost' IDENTIFIED BY 'secret';

medium

A. A new user 'bob' is created who can connect only from localhost

B. An error occurs because password is missing

C. User 'bob' is created but can connect from any host

D. The command deletes user 'bob' if exists

Solution

1. Step 1: Analyze the command

   The command creates a user named 'bob' who can connect only from 'localhost' with password 'secret'.

2. Step 2: Understand host specification

   The '@localhost' means the user can connect only from the local machine, not from other hosts.

3. Final Answer:

   A new user 'bob' is created who can connect only from localhost -> Option A

4. Quick Check:

   User@localhost limits connection to local machine [OK]

Hint: Host part limits where user can connect from [OK]

Common Mistakes:

• Assuming user can connect from any host without '%' wildcard
• Thinking password is missing causes error
• Confusing CREATE USER with DROP USER

4. Identify the error in this command:

CREATE USER 'carol' IDENTIFIED BY 'pass123';

medium

A. Usernames cannot be in quotes

B. Missing host part after username

C. Password must be numeric only

D. IDENTIFIED BY is not valid syntax

Solution

1. Step 1: Check syntax requirements for CREATE USER

   MySQL requires specifying the host part after the username, like 'user'@'host'.

2. Step 2: Identify the missing part

   The command misses '@host' after 'carol', which causes a syntax error.

3. Final Answer:

   Missing host part after username -> Option B

4. Quick Check:

   User must be 'name'@'host' [OK]

Hint: Always include '@host' after username [OK]

Common Mistakes:

• Omitting the host part
• Thinking quotes are not allowed for usernames
• Believing password must be numeric

5. You want to create a user 'dave' who can connect only from IP 192.168.1.100 with password 'safePass!'. Which command correctly achieves this and ensures the user has permission to select data from the 'employees' database?

hard

A. CREATE USER 'dave'@'192.168.1.100' IDENTIFIED BY 'safePass!'; GRANT SELECT ON employees TO 'dave'@'localhost';

B. CREATE USER 'dave' IDENTIFIED BY 'safePass!'; GRANT SELECT ON employees.* TO 'dave';

C. CREATE USER 'dave'@'%' IDENTIFIED BY 'safePass!'; GRANT ALL PRIVILEGES ON employees TO 'dave'@'%';

D. CREATE USER 'dave'@'192.168.1.100' IDENTIFIED BY 'safePass!'; GRANT SELECT ON employees.* TO 'dave'@'192.168.1.100';

Solution

1. Step 1: Create user with correct host and password

   The user 'dave' must be created with host '192.168.1.100' and password 'safePass!'. CREATE USER 'dave'@'192.168.1.100' IDENTIFIED BY 'safePass!';

2. Step 2: Grant correct permissions to the right user and host

   CREATE USER 'dave'@'192.168.1.100' IDENTIFIED BY 'safePass!'; GRANT SELECT ON employees.* TO 'dave'@'192.168.1.100'; grants SELECT on employees.* to 'dave'@'192.168.1.100', matching the user host. CREATE USER 'dave'@'192.168.1.100' IDENTIFIED BY 'safePass!'; GRANT SELECT ON employees TO 'dave'@'localhost'; grants to 'dave'@'localhost', which is incorrect. Options B and C have wrong host or privileges.

3. Final Answer:

   CREATE USER 'dave'@'192.168.1.100' IDENTIFIED BY 'safePass!'; GRANT SELECT ON employees.* TO 'dave'@'192.168.1.100'; -> Option D

4. Quick Check:

   User host and grant host must match [OK]

Hint: Match user host in CREATE USER and GRANT [OK]

Common Mistakes:

• Granting permissions to wrong host
• Using '%' wildcard when specific IP is required
• Granting wrong privileges or missing database.*