Let's say bobrocker forgot their password and we need to change it. What do we do?

alter user 'bobrocker'@'localhost' identified by '[new password]';

We can also change Bob's access permissions by issuing another grant command, like:

grant select, insert, update, delete, file on employees.* to 'bobrocker'@'localhost'

Now bobrocker has access to the file permission. Most normal users should just get the first four permissions, which are select, insert, update, and delete. This means that the user can only run those types of queries. For example, if we didn't allow insert, update, or delete, the user would effectively only have read-only access.