Privileges Provided by MySQL Enables use of the  DROP ROLE  statement. (The  CREATE USER  privilege also enables use of the  DROP ROLE  statement.) See Section 6.2.10, “Using Roles” . The  CREATE ROLE  and  DROP ROLE  privileges are not as powerful as  CREATE USER  because they can be used only to create and drop accounts. They cannot be used as  CREATE USER  can be modify account attributes or rename accounts. See User and Role Interchangeability. Enables use of statements that create, alter, drop, or display events for the Event Scheduler. Enables use of statements that execute stored routines (stored procedures and functions). For routines that fall within the scope at which the privilege is granted and for which the user is not the user named as the routine  DEFINER , also enables access to routine properties other than the routine definition. Affects the following operations and server behaviors: As a security measure, the server does not overwrite existing files. To limit the location in which files can be read and written, set the  secure_file_priv  system variable to a specific directory. See Section 5.1.8, “Server System Variables” . Enables you to grant to or revoke from other users those privileges that you yourself possess. Enables use of statements that create or drop (remove) indexes.  INDEX  applies to existing tables. If you have the  CREATE  privilege for a table, you can include index definitions in the  CREATE TABLE statement. Enables rows to be inserted into tables in a database.  INSERT  is also required for the  ANALYZE TABLE , OPTIMIZE TABLE , and  REPAIR TABLE  table-maintenance statements. Enables use of explicit  LOCK TABLES  statements to lock tables for which you have the  SELECT privilege. This includes use of write locks, which prevents other sessions from reading the locked table. •Enables use of the  DATA DIRECTORY  or  INDEX DIRECTORY  table option for the  CREATE TABLE statement. •Enables creating new files in any directory where the MySQL server has write access. This includes the server’s data directory containing the files that implement the privilege tables. •Enables reading and writing files on the server host using the  LOAD DATA  and  SELECT ... INTO OUTFILE  statements and the  LOAD_FILE()  function. A user who has the  FILE  privilege can read any file on the server host that is either world-readable or readable by the MySQL server. (This implies the user can read any file in any database directory, because the server can access any of those files.) • EVENT • EXECUTE • FILE • LOCK TABLES • INSERT • INDEX • GRANT OPTION