# Beyond `TiKV` Security

+ Authentication & Authorization
  + In `TiKV`, we don't have a user system for authentication or authorization
  + No granular access control
+ Security in `TiDB`
  + User authentication methods
    + `mysql_native_password`
    + `caching_sha2_password`
    + `auth_socket`
    + `TLS` certificate
  + `MySQL` compatible role-based access control (`RBAC`)
    + Create/Delete a role
    + Grant a privilege to a role
    + Grant a role to another user
  + `SSO`
    + `Okta`

------------------------------------------------------------