# Database Users Access Control (TiDB Dedicated)
+ Authentication plugins
  + **`mysql_native_password`**
  + **`caching_sha2_password`**
+ Authorization
  + Database roles and privileges are managed by SQL commands **`GRANT`** and **`REVOKE`**
  + Privileges consist of 3 object access levels
    + Global objects access
    + Schema/Database objects access
    + Tables access
------------------------------------------------------------------------------
You can use one of the authentication methods listed in the slide. To specify a default method that the TiDB server uses when the `client-server` connection is being established, set the `default_authentication_plugin` variable.

More details will be discussed in the Your Role for Security section in this chapter.

In another instructor-led training course created specifically for DBAs, TiDB Administration, there is a comprehensive chapter (Module: Security and User Management) dedicated to discussing the authentication and authorization of database users. For more detailed information, please refer to the following link: `https://www.pingcap.com/education/course-tidb-administration/`