# Certification and Empowerment of TiDB

__*TiDB certification*__
__*Empowering TiDB*__
__*TiDB authentication*__
__*TiDB authorization*__

+ Authentication (authentication): To authenticate users
  + Is the first step in privilege control
  + When a user connects to a database for the first time, it must be authenticated (authentication)
  + Unable to connect to the database if authentication (authentication) fails
+ Authorization (authorization): To verify the user's privilege
  + This is the second step in privilege control
  + TiDB will decide if the user has permission to do what he wants to do.

-------------------------------------------------------------
User management in TiDB enables you to control what actions users can and cannot do. For example:
    1. Create users and roles with different privilege to access data
    
    2. Avoid using the root account
    
    3. Ensuring data consistency and security
        Here, we need to understand that when querying after connecting to the TiDB database, privilege management will include 2 stages in the whole process. The first is authentication (authentication), which allows the user to connect; the next is authorization (authorization), which gives the connected user certain privilege to operate . After these two actions, the user can query the data.
        Authentication (authentication) and authorization (authorization) have the following characteristics:

Authentication (authentication): To authenticate users

Is the first step in privilege control

When a user connects to a database for the first time, it must be authenticated (authentication)

Unable to connect to the database if authentication (authentication) fails

Authorization (authorization): To verify the user's privilege

This is the second step in privilege control

TiDB will decide if the user has permission to do what he wants to do.