限制用户登录IP（IP白名单）

CREATE/ALTER USER user [auth_option] [expiration_option | lock_option | host_option] ... 
host_option: {
hosts 'host_list'
};
create user testuser identified by 'testuserpwd' hosts '192.168.6.164 192.168.6.165' ;

hosts里面是允许访问的IP，即IP白名单

创建管理员用户，并给管理员用户赋予所有权限（DBA用户权限）：

create user adminuser identified by 'adminuserpwd' hosts '192.168.6.164 192.168.6.165' ;
grant all privileges on *.* to adminuser@'%' with grant option;

使用adminuser创建普通用户，并赋权

create user testuser identified by 'testuserpwd' hosts '192.168.6.164 192.168.6.165' ;
grant select,insert,update,delete on db1.* to testuser@'%';

给用户testuser增加白名单IP地址

alter user testuser hosts '192.168.6.164 192.168.6.165 192.168.6.166';

hosts指定可访问IP列表，IP以空格间隔，支持通配符%和_

用户白名单IP列表查看

select host,user,host_list from gbase.user_check where user='testuser' ;

用户具备的权限查看

show grants for testuser;