diff --git a/site/docs/reference/Connectors/capture-connectors/MariaDB/MariaDB.md b/site/docs/reference/Connectors/capture-connectors/MariaDB/MariaDB.md index 1bd906d0617..2ebe6a74cae 100644 --- a/site/docs/reference/Connectors/capture-connectors/MariaDB/MariaDB.md +++ b/site/docs/reference/Connectors/capture-connectors/MariaDB/MariaDB.md @@ -40,8 +40,10 @@ To meet these requirements, do the following: 1. Create the `flow_capture` user with replication permission, and the ability to read all tables. -The `SELECT` permission can be restricted to just the tables that need to be -captured, but automatic discovery requires `information_schema` access as well. +Grant `SELECT` on all tables or restrict it to the tables to be captured. `SELECT` +permissions must be at the table level, not the column level. Automatic discovery also +requires `information_schema` access. To keep specific columns, such as sensitive fields, +out of the capture, use [redaction](/features/redaction.md) rather than column-level grants. ```sql CREATE USER IF NOT EXISTS flow_capture IDENTIFIED BY 'secret'; diff --git a/site/docs/reference/Connectors/capture-connectors/MySQL/MySQL.md b/site/docs/reference/Connectors/capture-connectors/MySQL/MySQL.md index c3fa9d0dc1f..93eb1dae403 100644 --- a/site/docs/reference/Connectors/capture-connectors/MySQL/MySQL.md +++ b/site/docs/reference/Connectors/capture-connectors/MySQL/MySQL.md @@ -54,8 +54,10 @@ To meet these requirements, follow the steps for your hosting type. 1. Create the `flow_capture` user with replication permission, and the ability to read all tables. -The `SELECT` permission can be restricted to just the tables that need to be -captured, but automatic discovery requires `information_schema` access as well. +Grant `SELECT` on all tables or restrict it to the tables to be captured. `SELECT` +permissions must be at the table level, not the column level. Automatic discovery also +requires `information_schema` access. To keep specific columns, such as sensitive fields, +out of the capture, use [redaction](/features/redaction.md) rather than column-level grants. ```sql CREATE USER IF NOT EXISTS flow_capture @@ -149,8 +151,10 @@ CALL mysql.rds_set_configuration('binlog retention hours', 168); 3. Using [MySQL workbench](https://docs.microsoft.com/en-us/azure/mysql/single-server/connect-workbench) or your preferred client, create the `flow_capture` user with replication permission, and the ability to read all tables. -The `SELECT` permission can be restricted to just the tables that need to be -captured, but automatic discovery requires `information_schema` access as well. +Grant `SELECT` on all tables or restrict it to the tables to be captured. `SELECT` +permissions must be at the table level, not the column level. Automatic discovery also +requires `information_schema` access. To keep specific columns, such as sensitive fields, +out of the capture, use [redaction](/features/redaction.md) rather than column-level grants. :::tip Your username must be specified in the format `username@servername`.