Skip to Main Content
Status Future consideration
Workspace * IBM Cloud Ideas
Categories Databases
Created by Guest
Created on Jun 13, 2025

Enable ability to grant roles to admin user in Databases for MySQL

In our organization, we use an internal permission management tool that is based on role-based access control (RBAC). Our MySQL databases use roles to group permissions (SELECT, INSERT, UPDATE, DELETE), and these roles are assigned to users via GRANT ROLE_X TO user.

In the current implementation of IBM Cloud Databases for MySQL, the admin user has permissions directly on the tables, but it is not possible to assign roles to admin (e.g., GRANT ROLE_ADMIN TO 'admin'@'%' is blocked). Our tools require that roles be explicitly assigned to all users, including admin, for proper auditing and compliance validation.

We understand that this restriction exists as part of the managed platform, but we would like to request an enhancement to allow the explicit assignment of roles to the admin user, or to provide an alternative mechanism to expose such role mappings for RBAC tools.

This would greatly help customers like us who rely on strict RBAC models for compliance and security purposes.

Thank you for your consideration.

Business impact:
Without this feature, we cannot fully automate our permission management and auditing processes. Manual workarounds are needed, which is not ideal in a DevSecOps environment.

Idea priority High
Needed By Quarter