Grant Tables Provided by MySQL” .) Each such operation can be permitted to an account by granting the associated dynamic privilege rather than  SUPER . This change improves security by enabling DBAs to avoid granting SUPER  and tailor user privileges more closely to the operations permitted.  SUPER  is now deprecated; expect it to be removed in a future version of MySQL. When removal of  SUPER  occurs, operations that formerly required  SUPER  fail unless accounts granted SUPER  are migrated to the appropriate dynamic privileges. Use the following instructions to accomplish that goal so that accounts are ready prior to  SUPER  removal: SELECT GRANTEE FROM INFORMATION_SCHEMA.USER_PRIVILEGES WHERE PRIVILEGE_TYPE = ’SUPER’; 1. Execute this query to identify accounts that are granted  SUPER : 2. For each account identified by the preceding query, determine the operations for which it needs  SUPER . Then grant the dynamic privileges corresponding to those operations, and revoke  SUPER . For example, if  ’u1’@’localhost’  requires  SUPER  for binary log purging and system variable modification, these statements make the required changes to the account: After you have modified all applicable accounts, the  INFORMATION_SCHEMA  query in the first step should produce an empty result set. The  mysql  system database includes several grant tables that contain information about user accounts and the privileges held by them. This section describes those tables. For information about other tables in the system database, see Section 5.3, “The mysql System Schema” . The discussion here describes the underlying structure of the grant tables and how the server uses their contents when interacting with clients. However, normally you do not modify the grant tables directly. Modifications occur indirectly when you use account-management statements such as  CREATE USER ,  GRANT , and  REVOKE  to set up accounts and control the privileges available to each one. See Section 13.7.1, “Account Management Statements” . When you use such statements to perform account manipulations, the server modifies the grant tables on your behalf. 6.2.3 Grant Tables GRANT BINLOG_ADMIN, SYSTEM_VARIABLES_ADMIN ON *.* TO ’u1’@’localhost’; REVOKE SUPER ON *.* FROM ’u1’@’localhost’; Note Direct modification of grant tables using statements such as  INSERT ,  UPDATE , or DELETE  is discouraged and done at your own risk. The server is free to ignore rows that become malformed as a result of such modifications. For any operation that modifies a grant table, the server checks whether the table has the expected structure and produces an error if not. To update the tables to the expected structure, perform the MySQL upgrade procedure. See Section 2.11, “Upgrading MySQL” . •Grant Table Overview •The user and db Grant Tables •The tables_priv and columns_priv Grant Tables •The procs_priv Grant Table 1204