Privileges Provided by MySQL the required privileges to execute the transactions received by the replication channel or contained in the  mysqlbinlog  output, for example to update the affected tables. For more information, see Section 17.3.3, “Replication Privilege Checks” . • REPLICATION_SLAVE_ADMIN • RESOURCE_GROUP_ADMIN • RESOURCE_GROUP_USER • ROLE_ADMIN Enables the account to connect to the replication source server, start and stop replication using the  START REPLICA | SLAVE  and  STOP REPLICA | SLAVE  statements, and use the  CHANGE REPLICATION SOURCE TO  statement (from MySQL 8.0.23) or  CHANGE MASTER TO  statement (before MySQL 8.0.23) and the  CHANGE REPLICATION FILTER  statements. Grant this privilege to accounts that are used by replicas to connect to the current server as their replication source server. This privilege does not apply to Group Replication; use  GROUP_REPLICATION_ADMIN  for that. Enables resource group management, consisting of creating, altering, and dropping resource groups, and assignment of threads and statements to resource groups. A user with this privilege can perform any operation relating to resource groups. Enables assigning threads and statements to resource groups. A user with this privilege can use the  SET RESOURCE GROUP  statement and the  RESOURCE_GROUP  optimizer hint. Enables granting and revoking roles, use of the  WITH ADMIN OPTION  clause of the  GRANT  statement, and nonempty  <graphml>  element content in the result from the  ROLES_GRAPHML()  function. Required to set the value of the  mandatory_roles  system variable. Enables connections to the network interface that permits only administrative connections (see Section 5.1.12.1, “Connection Interfaces” ). • SERVICE_CONNECTION_ADMIN • SESSION_VARIABLES_ADMIN  (added in MySQL 8.0.14) For most system variables, setting the session value requires no special privileges and can be done by any user to affect the current session. For some system variables, setting the session value can have effects outside the current session and thus is a restricted operation. For these, the SESSION_VARIABLES_ADMIN  privilege enables the user to set the session value. If a system variable is restricted and requires a special privilege to set the session value, the variable description indicates that restriction. Examples include  binlog_format ,  sql_log_bin , and sql_log_off . Prior to MySQL 8.0.14 when  SESSION_VARIABLES_ADMIN  was added, restricted session system variables can be set only by users who have the  SYSTEM_VARIABLES_ADMIN  or  SUPER  privilege. The  SESSION_VARIABLES_ADMIN  privilege is a subset of the  SYSTEM_VARIABLES_ADMIN  and SUPER  privileges. A user who has either of those privileges is also permitted to set restricted session variables and effectively has  SESSION_VARIABLES_ADMIN  by implication and need not be granted SESSION_VARIABLES_ADMIN  explicitly. See also Section 5.1.9.1, “System Variable Privileges” . • SET_USER_ID 1199