the required privileges to execute the transactions received by the replication channel or contained in the mysqlbinlog  output, for example to update the affected tables. For more information, see Section 17.3.3, “Replication Privilege Checks” . 

• REPLICATION_SLAVE_ADMIN 

Enables the account to connect to the replication source server, start and stop replication using the START REPLICA | SLAVE  and STOP REPLICA | SLAVE  statements, and use the CHANGE REPLICATION SOURCE TO  statement (from MySQL 8.0.23) or CHANGE MASTER TO  statement (before MySQL 8.0.23) and the CHANGE REPLICATION FILTER  statements. Grant this privilege to accounts that are used by replicas to connect to the current server as their replication source server. This privilege does not apply to Group Replication; use GROUP_REPLICATION_ADMIN  for that. 

• RESOURCE_GROUP_ADMIN 

Enables resource group management, consisting of creating, altering, and dropping resource groups, and assignment of threads and statements to resource groups. A user with this privilege can perform any operation relating to resource groups. 

• RESOURCE_GROUP_USER 

Enables assigning threads and statements to resource groups. A user with this privilege can use the SET RESOURCE GROUP  statement and the RESOURCE_GROUP  optimizer hint. 

• ROLE_ADMIN 

Enables granting and revoking roles, use of the WITH ADMIN OPTION  clause of the GRANT  statement, and nonempty <graphml>  element content in the result from the ROLES_GRAPHML()  function. Required to set the value of the mandatory_roles  system variable. 

• SERVICE_CONNECTION_ADMIN 

Enables connections to the network interface that permits only administrative connections (see Section 5.1.12.1, “Connection Interfaces” ). 

• SESSION_VARIABLES_ADMIN  (added in MySQL 8.0.14) 

For most system variables, setting the session value requires no special privileges and can be done by any user to affect the current session. For some system variables, setting the session value can have effects outside the current session and thus is a restricted operation. For these, the SESSION_VARIABLES_ADMIN  privilege enables the user to set the session value. 

If a system variable is restricted and requires a special privilege to set the session value, the variable description indicates that restriction. Examples include binlog_format , sql_log_bin , and sql_log_off . 

Prior to MySQL 8.0.14 when SESSION_VARIABLES_ADMIN  was added, restricted session system variables can be set only by users who have the SYSTEM_VARIABLES_ADMIN  or SUPER  privilege. 

The SESSION_VARIABLES_ADMIN  privilege is a subset of the SYSTEM_VARIABLES_ADMIN  and SUPER  privileges. A user who has either of those privileges is also permitted to set restricted session variables and effectively has SESSION_VARIABLES_ADMIN  by implication and need not be granted SESSION_VARIABLES_ADMIN  explicitly. 

See also Section 5.1.9.1, “System Variable Privileges” . 

• SET_USER_ID 

