For many years MySQL had a problem with managing granular privileges: Anyone who had all privileges on a MySQL system database could grant all other privileges, including "grant option" and "super." That complicated managing privileges and resulted in a less secure setup. MySQL 8.0 introduced 3 critical features: 1. partial revokes 2. splitting SUPER privilege to more granular set and 3. roles. In this presentation, I will show how to use the new features to increase MySQL security and protect it from privilege escalations.