Privileges Provided by MySQL •Enables granting and revoking roles, use of the  WITH ADMIN OPTION  clause of the  GRANT statement, and nonempty  <graphml>  element content in the result from the  ROLES_GRAPHML() function. •Enables control over client connections not permitted to non- SUPER  accounts: •Enables use of the  KILL  statement or  mysqladmin kill  command to kill threads belonging to other accounts. (An account can always kill its own threads.) •The server does not execute  init_connect  system variable content when  SUPER  clients connect. •The server accepts one connection from a  SUPER  client even if the connection limit configured by the  max_connections  system variable is reached. •A server in offline mode ( offline_mode  enabled) does not terminate  SUPER  client connections at the next client request, and accepts new connections from  SUPER  clients. •Updates can be performed even when the  read_only  system variable is enabled. This applies to explicit table updates, and to use of account-management statements such as  GRANT  and  REVOKE that update tables implicitly. • TRIGGER • UPDATE • USAGE The corresponding dynamic privilege is  ROLE_ADMIN . The corresponding dynamic privilege for the preceding connection-control operations is CONNECTION_ADMIN . You may also need the  SUPER  privilege to create or alter stored functions if binary logging is enabled, as described in Section 25.7, “Stored Program Binary Logging” . Enables trigger operations. You must have this privilege for a table to create, drop, execute, or display triggers for that table. When a trigger is activated (by a user who has privileges to execute  INSERT ,  UPDATE , or  DELETE statements for the table associated with the trigger), trigger execution requires that the user who defined the trigger still have the  TRIGGER  privilege for the table. Enables rows to be updated in tables in a database. This privilege specifier stands for “no privileges.”  It is used at the global level with  GRANT  to specify clauses such as  WITH GRANT OPTION  without naming specific account privileges in the privilege list. SHOW GRANTS  displays  USAGE  to indicate that an account has no privileges at a privilege level. Dynamic privileges are defined at runtime, in contrast to static privileges, which are built in to the server. The following list describes each dynamic privilege available in MySQL. Most dynamic privileges are defined at server startup. Others are defined by a particular component or plugin, as indicated in the privilege descriptions. In such cases, the privilege is unavailable unless the component or plugin that defines it is enabled. Dynamic Privilege Descriptions 1195