permissions:
  - alter
  - alter_routine
  - allow_nonexistent_definer
  - application_password_admin
  - audit_abort_exempt
  - audit_admin
  - authentication_policy_admin
  - backup_admin
  - binlog_admin
  - binlog_encryption_admin
  - clone_admin
  - connection_admin
  - create
  - create_role
  - create_routine
  - create_tablespace
  - create_temporary_tables
  - create_user
  - create_view
  - delete
  - drop
  - drop_role
  - encryption_key_admin
  - event
  - execute
  - file
  - firewall_admin
  - firewall_exempt
  - firewall_user
  - flush_optimizer_costs
  - flush_status
  - flush_tables
  - flush_user_resources
  - grant_option
  - group_replication_admin
  - group_replication_stream
  - index
  - innodb_redo_log_archive
  - innodb_redo_log_enable
  - insert
  - locking_tables
  - masking_dictionaries_admin
  - ndb_stored_user
  - passwordless_user_admin
  - persist_ro_variables_admin
  - process
  - proxy
  - references
  - reload
  - replication_applier
  - replication_client
  - replication_slave
  - replication_slave_admin
  - resource_group_admin
  - resource_group_user
  - role_admin
  - select
  - sensitive_variables_observer
  - service_connection_admin
  - session_variables_admin
  - set_any_definer
  - set_user_id
  - show_databases
  - show_routine
  - show_view
  - shutdown
  - skip_query_rewrite
  - super
  - system_user
  - system_variables_admin
  - table_encryption_admin
  - telemetry_log_admin
  - tp_connection_admin
  - transaction_gtid_tag
  - trigger
  - update
  - usage
  - version_token_admin
  - xa_recover_admin