Skip to content

Commit 973de0f

Browse files
committed
PXB-2490 xtrabackup privileges update (8.0)
Changes to be committed: modified: source/using_xtrabackup/privileges.rst
1 parent d27028b commit 973de0f

File tree

1 file changed

+10
-2
lines changed

1 file changed

+10
-2
lines changed

storage/innobase/xtrabackup/doc/source/using_xtrabackup/privileges.rst

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -79,8 +79,7 @@ Once connected to the server, in order to perform a backup you will need
7979
``READ`` and ``EXECUTE`` permissions at a filesystem level in the
8080
server's :term:`datadir`.
8181

82-
The database user needs the following privileges on the tables/databases to be
83-
backed up:
82+
The database user needs the following privileges on the tables or databases to be backed up:
8483

8584
* ``RELOAD`` and ``LOCK TABLES`` (unless the :option:`--no-lock <--no-lock>`
8685
option is specified) in order to run :mysql:`FLUSH TABLES WITH READ LOCK` and
@@ -119,6 +118,8 @@ backed up:
119118
to look up the ``innodb_to_lsn`` values in the
120119
:ref:`PERCONA_SCHEMA.xtrabackup_history <xtrabackup_history>` table.
121120

121+
* ``SELECT`` privilege on the `keyring_component_status table <https://dev.mysql.com/doc/refman/8.0/en/performance-schema-keyring-component-status-table.html>`__ to view the attributes and status of the installed keyring component when in use.
122+
122123
The explanation of when these are used can be found in
123124
:ref:`how_xtrabackup_works`.
124125

@@ -130,4 +131,11 @@ to full backups would be:
130131
mysql> CREATE USER 'bkpuser'@'localhost' IDENTIFIED BY 's3cr%T';
131132
mysql> GRANT BACKUP_ADMIN, PROCESS, RELOAD, LOCK TABLES, REPLICATION CLIENT ON *.* TO 'bkpuser'@'localhost';
132133
mysql> GRANT SELECT ON performance_schema.log_status TO 'bkpuser'@'localhost';
134+
mysql> GRANT SELECT ON performance_schema.keyring_component_status TO bkpuser@'localhost'
133135
mysql> FLUSH PRIVILEGES;
136+
137+
138+
139+
140+
141+

0 commit comments

Comments
 (0)