SHOW GRANTS

Grammar Description

Use the SHOW GRANTS statement to display all authorization information for the user. The SHOW GRANTS statement displays permissions assigned to the user using the GRANT command.

Using the SHOW GRANTS statement requires SELECT permissions for all tables under the query mo_catalog library, except for the permissions and roles of the current user.

To name an account or role for SHOW GRANTS, use the same format as the GRANT statement, for example:

show grants for 'root'@'localhost';

Grammar Structure

> SHOW GRANTS FOR {username[@hostname] | rolename};

Example

create role role role1;
grant all on table *.* to role1;
grant create table, drop table on database *.* to role1;
create user user1 identified by 'pass1';
grant role1 to user1;
> show grants for 'user1'@'localhost';
+------------------------------------------------------------------------------------------------------------------------------
| Grants for user1@localhost |
+------------------------------------------------------------------------------------------------------------------------------
| GRANT connect ON account `user1`@`localhost` |
| GRANT table all ON table *.* `user1`@`localhost` |
| GRANT create table ON database *.* `user1`@`localhost` |
| GRANT drop table ON database *.* `user1`@`localhost` |
+------------------------------------------------------------------------------------------------------------------------------
4 rows in set (0.00 sec)

mysql> show grants for ROLE role1;
+-----------------------------------------------------+
| Grants for role1 |
+-----------------------------------------------------+
| GRANT table all ON table *.* `role1` |
| GRANT create table ON database *.* `role1` |
| GRANT drop table ON database *.* `role1` |
+-----------------------------------------------------+
3 rows in set (0.00 sec)