# MariaDB PMM Client Commands Access Denied **URL:** \ **Category:** PMM 2.x\ **Created:** [August 27, 2024, 1:34pm UTC](https://forums.percona.com/t/mariadb-pmm-client-commands-access-denied/32626 "2024-08-27T13:34:04Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![\_Joe\_Keilty](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/_joe_keilty/32/17804_2.png) [@\_Joe\_Keilty](https://forums.percona.com/u/_Joe_Keilty)\ **Post date:** [August 27, 2024, 1:34pm UTC](https://forums.percona.com/t/mariadb-pmm-client-commands-access-denied/32626/1 "2024-08-27T13:34:04Z")
## Description: Running PMM 2.42 server/client and MariaDB 10.11. Have created a `pmm`@`127.0.0.1` user with following privileges: GRANT SELECT, RELOAD, PROCESS, SLAVE MONITOR ON _._ TO `pmm`@`127.0.0.1` IDENTIFIED BY PASSWORD ‘hunter2’ WITH MAX\_USER\_CONNECTIONS 10 This was following the instructions on documentation. Generally things look okay, but on the MySQL User Details dashboard powered by Userstats plugin, I can see that the `pmm` user is issuing commands and receiving Access Denied at a rate of 0.1 per second. ## Steps to Reproduce: Run MariaDB 10.11, create PMM user as defined, run PMM client and add mysql service (using performance schema as source - followed the standard instructions in docs). ## Version: 2.42.0 ## Logs: pmm-admin status gives: ```auto PMM Server: URL : https://10.1.0.91:8443/ Version: 2.42.0 PMM Client: Connected : true Time drift : 305.244µs Latency : 454.094µs Connection uptime: 100 pmm-admin version: 2.42.0 pmm-agent version: 2.42.0 Agents: /agent_id/0ae7f099-cdf1-41af-9bde-984a04fa8943 mysql_perfschema_agent Running 0 /agent_id/6424216b-230d-4dcf-aa33-4ec604414b68 vmagent Running 42000 /agent_id/b52ccc5e-ff46-4bab-8eb6-a71143547de3 mysqld_exporter Running 42001 /agent_id/d5ee4b80-e502-4b70-9943-fb5d7917393c node_exporter Running 42002 ``` logs for pmm agent service: ```auto Aug 27 13:12:11 database-staging systemd[1]: Started pmm-agent.service - pmm-agent. Aug 27 13:12:11 database-staging pmm-agent[231076]: time="2024-08-27T13:12:11.182+00:00" level=info msg="Loading configuration file /usr/local/percona/pmm2/config/pmm-agent.yaml." component=main Aug 27 13:12:11 database-staging pmm-agent[231076]: time="2024-08-27T13:12:11.183+00:00" level=info msg="Using /usr/local/percona/pmm2/exporters/node_exporter" component=main Aug 27 13:12:11 database-staging pmm-agent[231076]: time="2024-08-27T13:12:11.183+00:00" level=info msg="Using /usr/local/percona/pmm2/exporters/mysqld_exporter" component=main Aug 27 13:12:11 database-staging pmm-agent[231076]: time="2024-08-27T13:12:11.183+00:00" level=info msg="Using /usr/local/percona/pmm2/exporters/mongodb_exporter" component=main Aug 27 13:12:11 database-staging pmm-agent[231076]: time="2024-08-27T13:12:11.183+00:00" level=info msg="Using /usr/local/percona/pmm2/exporters/postgres_exporter" component=main Aug 27 13:12:11 database-staging pmm-agent[231076]: time="2024-08-27T13:12:11.183+00:00" level=info msg="Using /usr/local/percona/pmm2/exporters/proxysql_exporter" component=main Aug 27 13:12:11 database-staging pmm-agent[231076]: time="2024-08-27T13:12:11.183+00:00" level=info msg="Using /usr/local/percona/pmm2/exporters/rds_exporter" component=main Aug 27 13:12:11 database-staging pmm-agent[231076]: time="2024-08-27T13:12:11.183+00:00" level=info msg="Using /usr/local/percona/pmm2/exporters/azure_exporter" component=main Aug 27 13:12:11 database-staging pmm-agent[231076]: time="2024-08-27T13:12:11.183+00:00" level=info msg="Using /usr/local/percona/pmm2/exporters/vmagent" component=main Aug 27 13:12:12 database-staging pmm-agent[231076]: time="2024-08-27T13:12:12.323+00:00" level=warning msg="ts=2024-08-27T13:12:12.323Z caller=node_exporter.go:186 level=warn msg=\"Node Exporter is running> ``` ## Expected Result: I would expect to see nothing in the Access Denied graph for pmm user ## Actual Result: ![Screenshot 2024-08-27 at 14.33.08](https://us1.discourse-cdn.com/flex019/uploads/percona1/original/3X/5/5/5523ee9b81bbddac95532c8fad6c0c9f3d1b5117.png) ## Additional Information: Couldn’t find anything in mariadb server error log and nothing came up googling to figure out how to debug ---
**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\ **Post date:** [August 27, 2024, 4:28pm UTC](https://forums.percona.com/t/mariadb-pmm-client-commands-access-denied/32626/2 "2024-08-27T16:28:21Z")
In MySQL, you can increase log verbosity to see login failures. Maybe MariaDB has something similar? ---
**Author:** ![\_Joe\_Keilty](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/_joe_keilty/32/17804_2.png) [@\_Joe\_Keilty](https://forums.percona.com/u/_Joe_Keilty)\ **Post date:** [August 28, 2024, 7:10am UTC](https://forums.percona.com/t/mariadb-pmm-client-commands-access-denied/32626/3 "2024-08-28T07:10:01Z")
These ones don’t seem to be login failures - they seem to be pmm issuing a command and not having the privileges to execute it 🤔 I am going to try granting BINLOG MONITOR privilege in addition to REPLICA MONITOR as this is what my previous vanilla mysqld exporter had. I’ll let you know if that works! ---
**Author:** ![\_Joe\_Keilty](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/_joe_keilty/32/17804_2.png) [@\_Joe\_Keilty](https://forums.percona.com/u/_Joe_Keilty)\ **Post date:** [August 28, 2024, 2:13pm UTC](https://forums.percona.com/t/mariadb-pmm-client-commands-access-denied/32626/4 "2024-08-28T14:13:01Z")
BINLOG MONITOR sorted it for me. ![Screenshot 2024-08-28 at 15.11.47](https://us1.discourse-cdn.com/flex019/uploads/percona1/original/3X/9/d/9d208256000cd88c2aed37d0dd076911badfe128.png) I noticed your docs are open source so I can contribute a pull request with the changes for MariaDB ---
**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\ **Post date:** [August 28, 2024, 6:45pm UTC](https://forums.percona.com/t/mariadb-pmm-client-commands-access-denied/32626/5 "2024-08-28T18:45:20Z")
That would be awesome! Thanks for helping!