--- slug: "mysql-missing-with-grant-option-for-root" title: "MySQL: Lost the WITH GRANT OPTION Privilege from Root" description: "While managing the root user with the mysql_user module in Ansible, I found that I was no longer able to grant privileges to other users." url: "https://www.ytyng.com/en/blog/mysql-missing-with-grant-option-for-root" publish_date: "2018-02-26T13:14:58Z" created: "2018-02-26T13:14:58Z" updated: "2026-02-27T07:35:08.618Z" categories: ["MySQL"] keywords: "" featured_image_url: "https://media.ytyng.com/resize/20230812/d3164ec97fd043029b9f4bf4e7dc9ad5.png.webp?width=768" has_video: false has_music: false video_urls: [] music_urls: [] lang: "en" --- # MySQL: Lost the WITH GRANT OPTION Privilege from Root

While managing the root user with the mysql_user module in Ansible, I found that I was no longer able to grant privileges to other users.

When I checked the grants for root, I saw:

mysql> show grants;
+--------------------------------------------------------------+
| Grants for root@localhost                                    |
+--------------------------------------------------------------+
| GRANT ALL PRIVILEGES ON *.* TO 'root'@'localhost'            |
| GRANT PROXY ON ''@'' TO 'root'@'localhost' WITH GRANT OPTION |
+--------------------------------------------------------------+

The WITH GRANT OPTION was missing.

In such a case, you can forcefully set the Grant_priv by executing:

UPDATE mysql.user SET Grant_priv = 'Y' WHERE User='root';

(You might need to run FLUSH PRIVILEGES; afterward?)

The correct show grants should look like this:

mysql> show grants;
+---------------------------------------------------------------------+
| Grants for root@localhost                                           |
+---------------------------------------------------------------------+
| GRANT ALL PRIVILEGES ON *.* TO 'root'@'localhost' WITH GRANT OPTION |
| GRANT PROXY ON ''@'' TO 'root'@'localhost' WITH GRANT OPTION        |
+---------------------------------------------------------------------+

This is how it should appear.