The following examples show how to use the mysql client program to set up new accounts. 以下示例显示了如何使用mysql客户端程序设置新帐户。These examples assume that the MySQL root account has the CREATE USER privilege and all privileges that it grants to other accounts.这些示例假设MySQLroot帐户具有CREATE USER权限以及它授予其他帐户的所有权限。

At the command line, connect to the server as the MySQL root user, supplying the appropriate password at the password prompt:在命令行中，以MySQL root用户身份连接到服务器，在密码提示下提供相应的密码：

shell> mysql -u root -p
Enter password: (enter root password here)

After connecting to the server, you can add new accounts. 连接到服务器后，您可以添加新帐户。The following example uses CREATE USER and GRANT statements to set up four accounts (where you see 'password', substitute an appropriate password):以下示例使用CREATE USER和GRANT语句设置四个帐户（在您看到'password'的地方，请替换为适当的密码）：

CREATE USER 'finley'@'localhost'
  IDENTIFIED BY 'password';
GRANT ALL
  ON *.*
  TO 'finley'@'localhost'
  WITH GRANT OPTION;

CREATE USER 'finley'@'%.example.com'
  IDENTIFIED BY 'password';
GRANT ALL
  ON *.*
  TO 'finley'@'%.example.com'
  WITH GRANT OPTION;

CREATE USER 'admin'@'localhost'
  IDENTIFIED BY 'password';
GRANT RELOAD,PROCESS
  ON *.*
  TO 'admin'@'localhost';

CREATE USER 'dummy'@'localhost';

The accounts created by those statements have the following properties:这些报表创建的帐户具有以下属性：

The previous example grants privileges at the global level. The next example creates three accounts and grants them access at lower levels; that is, to specific databases or objects within databases. 前面的示例在全局级别授予特权。下一个示例创建了三个帐户，并授予它们较低级别的访问权限；即特定数据库或数据库内的对象。Each account has a user name of custom, but the host name parts differ:每个帐户都有一个自定义用户名，但主机名部分不同：

CREATE USER 'custom'@'localhost'
  IDENTIFIED BY 'password';
GRANT ALL
  ON bankaccount.*
  TO 'custom'@'localhost';

CREATE USER 'custom'@'host47.example.com'
  IDENTIFIED BY 'password';
GRANT SELECT,INSERT,UPDATE,DELETE,CREATE,DROP
  ON expenses.*
  TO 'custom'@'host47.example.com';

CREATE USER 'custom'@'%.example.com'
  IDENTIFIED BY 'password';
GRANT SELECT,INSERT,UPDATE,DELETE,CREATE,DROP
  ON customer.addresses
  TO 'custom'@'%.example.com';

The three accounts can be used as follows:这三个账户可以按如下方式使用：

To see the privileges for an account, use SHOW GRANTS:要查看帐户的权限，请使用SHOW GRANTS：

mysql> SHOW GRANTS FOR 'admin'@'localhost';
+-----------------------------------------------------+
| Grants for admin@localhost                          |
+-----------------------------------------------------+
| GRANT RELOAD, PROCESS ON *.* TO 'admin'@'localhost' |
+-----------------------------------------------------+

To see nonprivilege properties for an account, use SHOW CREATE USER:要查看帐户的非特权属性，请使用SHOW CREATE USER：

mysql> SET print_identified_with_as_hex = ON;
mysql> SHOW CREATE USER 'admin'@'localhost'\G
*************************** 1. row ***************************
CREATE USER for admin@localhost: CREATE USER 'admin'@'localhost'
IDENTIFIED WITH 'caching_sha2_password'
AS 0x24412430303524301D0E17054E2241362B1419313C3E44326F294133734B30792F436E77764270373039612E32445250786D43594F45354532324B6169794F47457852796E32
REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK
PASSWORD HISTORY DEFAULT
PASSWORD REUSE INTERVAL DEFAULT
PASSWORD REQUIRE CURRENT DEFAULT

Enabling the print_identified_with_as_hex system variable (available as of MySQL 8.0.17) causes SHOW CREATE USER to display hash values that contain unprintable characters as hexadecimal strings rather than as regular string literals.启用print_identified_with_as_hex系统变量（自MySQL 8.0.17起可用）会导致SHOW CREATE USER将包含不可打印字符的哈希值显示为十六进制字符串，而不是常规字符串文字。

To revoke account privileges, use the REVOKE statement. Privileges can be revoked at different levels, just as they can be granted at different levels.要撤销帐户权限，请使用REVOKE语句。特权可以在不同的级别撤销，就像它们可以在不同级别授予一样。

Revoke global privileges:撤销全局权限：

REVOKE ALL
  ON *.*
  FROM 'finley'@'%.example.com';

REVOKE RELOAD
  ON *.*
  FROM 'admin'@'localhost';

Revoke database-level privileges:撤销数据库级别权限：

REVOKE CREATE,DROP
  ON expenses.*
  FROM 'custom'@'host47.example.com';

Revoke table-level privileges:撤销表级权限：

REVOKE INSERT,UPDATE,DELETE
  ON customer.addresses
  FROM 'custom'@'%.example.com';

To check the effect of privilege revocation, use SHOW GRANTS:要检查特权撤销的效果，请使用SHOW GRANTS：

mysql> SHOW GRANTS FOR 'admin'@'localhost';
+---------------------------------------------+
| Grants for admin@localhost                  |
+---------------------------------------------+
| GRANT PROCESS ON *.* TO 'admin'@'localhost' |
+---------------------------------------------+

To remove an account, use the DROP USER statement. For example, to drop some of the accounts created previously:要删除帐户，请使用DROP USER语句。例如，要删除以前创建的一些帐户：

DROP USER 'finley'@'localhost';
DROP USER 'finley'@'%.example.com';
DROP USER 'admin'@'localhost';
DROP USER 'dummy'@'localhost';