Create A Read-Only MySQL Or MariaDB User

This page explains how to create a read-only MySQL or MariaDB user for the Coordimap agent.

Use this together with the main database configuration page:

• MySQL And MariaDB Configuration

The goal is straightforward: the agent should be able to read schema metadata without having any ability to modify application data.

Step 1: Create A Dedicated User

Create a service user for Coordimap. Replace the host and password placeholders with values that match your environment.

CREATE USER 'coordimap_readonly'@'%' IDENTIFIED BY '<YOUR_SECURE_PASSWORD>';

If you want to restrict access further, replace % with the specific host or subnet from which the agent connects.

Step 2: Grant Read Access

Grant the user read access to the database objects Coordimap needs to inspect.

For a single database:

GRANT SELECT, SHOW VIEW ON your_database.* TO 'coordimap_readonly'@'%';

If your deployment requires metadata inspection across multiple databases, grant the same permissions to each target database explicitly.

Apply the changes:

FLUSH PRIVILEGES;

Step 3: Verify The User

You can confirm the grants with:

SHOW GRANTS FOR 'coordimap_readonly'@'%';

Recommended Next Step

Once the user is ready, continue here:

• MySQL And MariaDB Configuration

When you configure the data source, use a stable scope_id such as server_uuid so the discovered database objects stay attached to the same upstream server identity over time.