Account Management Statements CREATE USER ’jeffrey’@’localhost’ REQUIRE CIPHER ’EDH-RSA-DES-CBC3-SHA’; CREATE USER ’jeffrey’@’localhost’ REQUIRE SUBJECT ’/C=SE/ST=Stockholm/L=Stockholm/ O=MySQL demo client certificate/ CN=client/emailAddress=client@example.com’ AND ISSUER ’/C=SE/ST=Stockholm/L=Stockholm/ O=MySQL/CN=CA/emailAddress=ca@example.com’ AND CIPHER ’EDH-RSA-DES-CBC3-SHA’; The  SUBJECT ,  ISSUER , and  CIPHER  options can be combined in the  REQUIRE  clause: It is possible to place limits on use of server resources by an account, as discussed in Section 6.2.20, “Setting Account Resource Limits” . To do so, use a  WITH  clause that specifies one or more resource_option  values. Order of  WITH  options does not matter, except that if a given resource limit is specified multiple times, the last instance takes precedence. CREATE USER  permits these  resource_option  values: For all accounts named by the statement, these options restrict how many queries, updates, and connections to the server are permitted to each account during any given one-hour period. If  count  is  0 (the default), this means that there is no limitation for the account. For all accounts named by the statement, restricts the maximum number of simultaneous connections to the server by each account. A nonzero  count  specifies the limit for the account explicitly. If  count is  0  (the default), the server determines the number of simultaneous connections for the account from the global value of the  max_user_connections  system variable. If  max_user_connections  is also zero, there is no limit for the account. CREATE USER  supports several  password_option  values for password management: 2858 •Password verification-required options: You can indicate whether attempts to change an account password must specify the current password, as verification that the user attempting to make the change actually knows the current password. •Password reuse options: You can restrict password reuse based on number of password changes, time elapsed, or both. •Password expiration options: You can expire an account password manually and establish its password expiration policy. Policy options do not expire the password. Instead, they determine how the server applies automatic expiration to the account based on password age, which is assessed from the date and time of the most recent account password change. CREATE USER Password-Management Options CREATE USER Resource-Limit Options • MAX_QUERIES_PER_HOUR  count ,  MAX_UPDATES_PER_HOUR  count , MAX_CONNECTIONS_PER_HOUR  count • MAX_USER_CONNECTIONS  count Example: CREATE USER ’jeffrey’@’localhost’ WITH MAX_QUERIES_PER_HOUR 500 MAX_UPDATES_PER_HOUR 100;