• NAME 

The group profile name. 

• MODE 

The current operational mode for the profile. Permitted mode values are OFF , DETECTING , PROTECTING , and RECORDING . For details about their meanings, see Firewall Concepts. 

• USERHOST 

The training account for the group profile, to be used when the profile is in RECORDING  mode. The value is NULL , or a non- NULL  account that has the format user_name @ host_name : 

•If the value is NULL , the firewall records allowlist rules for statements received from any account that is a member of the group. 

•If the value is non- NULL , the firewall records allowlist rules only for statements received from the named account (which should be a member of the group). 

The mysql.firewall_group_allowlist  table lists allowlist rules of registered firewall group profiles. The table has the following columns (with the corresponding Performance Schema firewall_group_allowlist  table having similar but not necessarily identical columns): 

• NAME 

The group profile name. 

• RULE 

A normalized statement indicating an acceptable statement pattern for the profile. A profile allowlist is the union of its rules. 

• ID 

An integer column that is a primary key for the table. 

The mysql.firewall_membership  table lists the members (accounts) of registered firewall group profiles. The table has the following columns (with the corresponding Performance Schema firewall_membership  table having similar but not necessarily identical columns): 

## Firewall Account Profile Tables 

• GROUP_ID 

The group profile name. 

• MEMBER_ID 

The name of an account that is a member of the profile. 

MySQL Enterprise Firewall maintains account profile information using tables in the mysql  system database for persistent storage and INFORMATION_SCHEMA  tables to provide views into in-memory cached data. 

Each mysql  system database table is accessible only by accounts that have the SELECT  privilege for it. The INFORMATION_SCHEMA  tables are accessible by anyone. 

