Privileges Provided by MySQL • CONNECTION_ADMIN Enables use of the  KILL  statement or  mysqladmin kill  command to kill threads belonging to other accounts. (An account can always kill its own threads.) Enables setting system variables related to client connections, or circumventing restrictions related to client connections.  CONNECTION_ADMIN  applies to the effects of these system variables: • init_connect : The server does not execute  init_connect  system variable content when CONNECTION_ADMIN  clients connect. • max_connections : The server accepts one connection from a  CONNECTION_ADMIN  client even if the connection limit configured by the  max_connections  system variable is reached. • offline_mode : A server in offline mode ( offline_mode  enabled) does not terminate CONNECTION_ADMIN  client connections at the next client request, and accepts new connections from CONNECTION_ADMIN  clients. • read_only : Updates can be performed even when the  read_only  system variable is enabled. This applies to explicit table updates, and to use of account-management statements such as  GRANT  and REVOKE  that update tables implicitly. • ENCRYPTION_KEY_ADMIN • FIREWALL_ADMIN • FIREWALL_USER • FLUSH_OPTIMIZER_COSTS  (added in MySQL 8.0.23) • FLUSH_STATUS  (added in MySQL 8.0.23) • FLUSH_TABLES  (added in MySQL 8.0.23) • FLUSH_USER_RESOURCES  (added in MySQL 8.0.23) • GROUP_REPLICATION_ADMIN Enables the account to start and stop Group Replication using the  START GROUP REPLICATION  and  STOP GROUP REPLICATION  statements, to change the global setting for the  group_replication_consistency  system variable, and to use the  group_replication_set_write_concurrency()  and Enables use of the  FLUSH USER_RESOURCES  statement. Enables use of the  FLUSH TABLES  statement. Enables use of the  FLUSH STATUS  statement. Enables use of the  FLUSH OPTIMIZER_COSTS  statement. Enables users to update their own firewall rules. This privilege is defined by the  MYSQL_FIREWALL plugin; see Section 6.4.7, “MySQL Enterprise Firewall” . Enables a user to administer firewall rules for any user. This privilege is defined by the MYSQL_FIREWALL  plugin; see Section 6.4.7, “MySQL Enterprise Firewall” . Enables  InnoDB  encryption key rotation. 1197