# Sql user permissions

**URL:** <https://community.temporal.io/t/sql-user-permissions/666>\
**Category:** Community Support\
**Created:** [September 23, 2020, 8:16pm UTC](https://community.temporal.io/t/sql-user-permissions/666 "2020-09-23T20:16:36Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dhruva\_Upamanyu](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/dhruva_upamanyu/32/313_2.png) [@Dhruva\_Upamanyu](https://community.temporal.io/u/Dhruva_Upamanyu)\
**Post date:** [September 23, 2020, 8:16pm UTC](https://community.temporal.io/t/sql-user-permissions/666/1 "2020-09-23T20:16:36Z")

</div>

Wanted to know what MySQL roles does temporal require after the initial db initialization. Does it require delete permission?

---

<div class="post-metadata">

**Author:** ![maxim](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/maxim/32/8_2.png) [@maxim](https://community.temporal.io/u/maxim)\
**Post date:** [September 23, 2020, 8:22pm UTC](https://community.temporal.io/t/sql-user-permissions/666/2 "2020-09-23T20:22:57Z")

</div>

I believe it doesn’t need any admin permissions. The service only performs read and write operations on the existing tables.

---

<div class="post-metadata">

**Author:** ![samar](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/samar/32/12_2.png) [@samar](https://community.temporal.io/u/samar)\
**Post date:** [September 23, 2020, 8:31pm UTC](https://community.temporal.io/t/sql-user-permissions/666/3 "2020-09-23T20:31:48Z")

</div>

We recommend using [temporal-sql-tool](https://github.com/temporalio/temporal/tree/master/tools/sql) for schema creation before running Temporal cluster on top of it. This would require permissions to create new schema. Once the schema is created service only does CRUD operations on the tables created by running [temporal-sql-tool](https://github.com/temporalio/temporal/tree/master/tools/sql).

---

<div class="post-metadata">

**Author:** ![Dhruva\_Upamanyu](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/dhruva_upamanyu/32/313_2.png) [@Dhruva\_Upamanyu](https://community.temporal.io/u/Dhruva_Upamanyu)\
**Post date:** [September 23, 2020, 8:38pm UTC](https://community.temporal.io/t/sql-user-permissions/666/4 "2020-09-23T20:38:52Z")

</div>

Does CRUD include DELETE? as a dev ops policy we avoid giving delete access to applications. Will this require it?

---

<div class="post-metadata">

**Author:** ![maxim](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/maxim/32/8_2.png) [@maxim](https://community.temporal.io/u/maxim)\
**Post date:** [September 23, 2020, 8:47pm UTC](https://community.temporal.io/t/sql-user-permissions/666/5 "2020-09-23T20:47:09Z")

</div>

Yes, the service requires DELETE permissions to support deletion of workflows after the retention period. Otherwise your DB is going to grow in size indefinitely.