Merge pull request #188997 from mksuni/mysql-flex-databases

Article to manage mysql flexible server databases in portal

Author: jborsecnik

articles/mysql/TOC.yml

@@ -40,6 +40,8 @@
           - name: ARM template
             displayName: Resource Manager
             href: flexible-server/quickstart-create-arm-template.md
+      - name: Create and manage databases
+        href: flexible-server/how-to-create-manage-databases.md
       - name: Connect and query
         items:
           - name: Azure CLI

articles/mysql/concepts-query-store.md

@@ -104,7 +104,7 @@ Use the [Azure portal](howto-server-parameters.md) or [Azure CLI](howto-confi
 
 ## Views and functions
 
-View and manage Query Store using the following views and functions. Anyone in the [select privilege public role](howto-create-users.md#to-create-more-admin-users-in-azure-database-for-mysql) can use these views to see the data in Query Store. These views are only available in the **mysql** database.
+View and manage Query Store using the following views and functions. Anyone in the [select privilege public role](howto-create-users.md) can use these views to see the data in Query Store. These views are only available in the **mysql** database.
 
 Queries are normalized by looking at their structure after removing literals and constants. If two queries are identical except for literal values, they will have the same hash.
 

articles/mysql/flexible-server/how-to-create-manage-databases.md

@@ -0,0 +1,48 @@
+---
+title: How to create databases for Azure Database for MySQL Flexible Server
+description: This article describes how to create and manage databases on Azure Database for MySQL Flexible server.
+author: mksuni
+ms.author: sumuth
+ms.service: mysql
+ms.topic: how-to
+ms.date: 02/17/2022
+---
+
+# Create and manage databases for Azure Database for MySQL Flexible Server
+
+This article contains information about creating, listing, and deleting MySQL databases on Azure Database for Flexible Server. 
+
+## Prerequisites
+Before completing the tasks, you must have
+- Created an Azure Database for MySQL Flexible server using [Azure portal](./quickstart-create-server-portal.md) <br/> or [Azure CLI](./quickstart-create-server-cli.md).
+- Sign in to [Azure portal](https://portal.azure.com).
+
+
+## List your databases
+To list all your databases on MySQL flexible server:
+- Open the **Overview** page of your MySQL flexible server.
+- Select **Databases** from the settings on left navigation menu. 
+
+> :::image type="content" source="media/how-to-create-manage-databases/databases-view-mysql-flexible-server.png" alt-text="Screenshot showing how to list all the databases on Azure Database for MySQL flexible server":::
+
+## Create a database
+To create a database on MySQL flexible server:
+
+- Select **Databases** from the settings on left navigation menu. 
+- Click on **Add** to create a database. Provide the database name, charset and collation settings for this database.
+- Click on  **Save** to complete the task. 
+
+> :::image type="content" source="media/how-to-create-manage-databases/create-database-azure-mysql-flexible-server.png" alt-text="Screenshot showing how to create a database on Azure Database for MySQL flexible server"::: 
+
+## Delete a database
+To delete a database on MySQL flexible server:
+
+- Select **Databases** from the settings on left navigation menu. 
+- Click on **testdatabase1** to select the database. You can select multiple databases to delete at the same time. 
+- Click on  **Delete** to complete the task. 
+
+> :::image type="content" source="media/how-to-create-manage-databases/delete-database-on-mysql-flexible-server.png" alt-text="Screenshot showing how to delete a database on Azure Database for MySQL flexible server"::: 
+
+## Next steps
+
+Learn how to [manage users](../howto-create-users.md)

articles/mysql/flexible-server/media/how-to-create-manage-databases/create-database-azure-mysql-flexible-server.png

@@ -1,18 +1,18 @@
 ---
-title: Create databases and users - Azure Database for MySQL
+title: How to create users for Azure Database for MySQL
 description: This article describes how to create new user accounts to interact with an Azure Database for MySQL server.
 author: savjani
 ms.author: pariks
 ms.service: mysql
 ms.topic: how-to
-ms.date: 01/13/2021
+ms.date: 02/17/2022
 ---
 
-# Create databases and users in Azure Database for MySQL
+# Create users in Azure Database for MySQL
 
 [!INCLUDE[applies-to-mysql-single-flexible-server](includes/applies-to-mysql-single-flexible-server.md)]
 
-This article describes how to create users in Azure Database for MySQL.
+This article describes how to create users for Azure Database for MySQL. 
 
 > [!NOTE]
 > This article contains references to the term *slave*, a term that Microsoft no longer uses. When the term is removed from the software, we'll remove it from this article.
@@ -30,87 +30,67 @@ After you create an Azure Database for MySQL server, you can use the first serve
 >
 > Password plugins like `validate_password` and `caching_sha2_password` aren't supported by the service.
 
-## To create a database with a non-admin user in Azure Database for MySQL
+## Create a database 
 
 1. Get the connection information and admin user name.
    To connect to your database server, you need the full server name and admin sign-in credentials. You can easily find the server name and sign-in information on the server **Overview** page or on the **Properties** page in the Azure portal.
 
 2. Use the admin account and password to connect to your database server. Use your preferred client tool, such as MySQL Workbench, mysql.exe, or HeidiSQL.
 
-   If you're not sure how to connect, see [connect and query data for Single Server](./connect-workbench.md) or [connect and query data for Flexible Server](./flexible-server/connect-workbench.md).
+> [!NOTE]
+> If you're not sure how to connect, see [connect and query data for Single Server](./connect-workbench.md) or [connect and query data for Flexible Server](./flexible-server/connect-workbench.md).
 
 3. Edit and run the following SQL code. Replace the placeholder value `db_user` with your intended new user name. Replace the placeholder value `testdb` with your database name.
 
    This SQL code creates a new database named testdb. It then creates a new user in the MySQL service and grants all privileges for the new database schema (testdb.\*) to that user.
 
    ```sql
    CREATE DATABASE testdb;
+   ```
 
+## Create a non-dmin user 
+ Now that the database is created , you can create with a non-admin user with the ``` CREATE USER``` MySQL statement. 
+   ``` sql
    CREATE USER 'db_user'@'%' IDENTIFIED BY 'StrongPassword!';
 
    GRANT ALL PRIVILEGES ON testdb . * TO 'db_user'@'%';
 
    FLUSH PRIVILEGES;
    ```
 
-4. Verify the grants in the database:
+## Verify the user permissions
+Run the ```SHOW GRANTS``` MySQL statement to view the privileges allowed for user **db_user**  on **testdb** database. 
 
    ```sql
    USE testdb;
 
    SHOW GRANTS FOR 'db_user'@'%';
    ```
 
-5. Sign in to the server, specifying the designated database and using the new user name and password. This example shows the mysql command line. When you use this command, you'll be prompted for the user's password. Use your own server name, database name, and user name.
-
-### [Single Server](#tab/single-server)
+## Connect to the database with new user 
+Sign in to the server, specifying the designated database and using the new user name and password. This example shows the mysql command line. When you use this command, you'll be prompted for the user's password. Use your own server name, database name, and user name. See how to connect for Single server and Flexible server below. 
 
-   ```azurecli-interactive
-   mysql --host mydemoserver.mysql.database.azure.com --database testdb --user db_user@mydemoserver -p
-   ```
-
-### [Flexible Server](#tab/flexible-server)
+| Server type      | Usage |
+| ----------- | ----------- |
+| Single Server     | ```mysql --host mydemoserver.mysql.database.azure.com --database testdb --user db_user@mydemoserver -p```     |
+| Flexible Server | ``` mysql --host mydemoserver.mysql.database.azure.com --database testdb --user db_user -p```|
 
-   ```azurecli-interactive
-   mysql --host mydemoserver.mysql.database.azure.com --database testdb --user db_user -p
-   ```
 
-## To create more admin users in Azure Database for MySQL
-
-1. Get the connection information and admin user name.
-   To connect to your database server, you need the full server name and admin sign-in credentials. You can easily find the server name and sign-in information on the server **Overview** page or on the **Properties** page in the Azure portal.
-
-2. Use the admin account and password to connect to your database server. Use your preferred client tool, such as MySQL Workbench, mysql.exe, or HeidiSQL.
-
-   If you're not sure how to connect, see [Use MySQL Workbench to connect and query data](./connect-workbench.md).
-
-3. Edit and run the following SQL code. Replace the placeholder value `new_master_user` with your new user name. This syntax grants the listed privileges on all the database schemas (*.*) to the user (`new_master_user` in this example).
+## Limit privileges for user 
+To restrict the type of operations a user can run on the database, you need to explicitly add the operations in the **GRANT** statement. See an example below:
 
    ```sql
    CREATE USER 'new_master_user'@'%' IDENTIFIED BY 'StrongPassword!';
 
    GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER ON *.* TO 'new_master_user'@'%' WITH GRANT OPTION;
 
-   FLUSH PRIVILEGES;
-   ```
-
-4. Verify the grants:
-
-   ```sql
-   USE sys;
-
-   SHOW GRANTS FOR 'new_master_user'@'%';
+   FLUSH PRIVILEGES;   
    ```
 
-## azure_superuser
+## About azure_superuser
 
 All Azure Database for MySQL servers are created with a user called "azure_superuser". This is a system account created by Microsoft to manage the server to conduct monitoring, backups, and other regular maintenance. On-call engineers may also use this account to access the server during an incident with certificate authentication and must request access using just-in-time (JIT) processes.
 
 ## Next steps
 
-Open the firewall for the IP addresses of the new users' machines to enable them to connect:
-
-* [Create and manage firewall rules on Single Server](howto-manage-firewall-using-portal.md)
-* [Create and manage firewall rules on Flexible Server](flexible-server/how-to-connect-tls-ssl.md)
-
 For more information about user account management, see the MySQL product documentation for [User account management](https://dev.mysql.com/doc/refman/5.7/en/access-control.html), [GRANT syntax](https://dev.mysql.com/doc/refman/5.7/en/grant.html), and [Privileges](https://dev.mysql.com/doc/refman/5.7/en/privileges-provided.html).