GRANT Syntax using PAM

GRANT ALL ON *.* to 'singlestore-db_user'@'127.0.0.1' 
IDENTIFIED WITH authentication_pam AS 'pam_service';

In the above example, creates a new user and pam_service is a placeholder for the actual PAM service name you would like to use. In this example, PAM would look for a config file named /etc/pam.d/pam_service. However, you must change pam_service to the actual service name, do not leave it as pam_service.

Most systems have a PAM service at /etc/pam.d/sshd, so it’s a straightforward way to test SingleStore DB and PAM:

GRANT ALL ON *.* to 'steve'@'localhost' IDENTIFIED WITH
authentication_pam as 'sshd';

This example creates a new user 'steve' and uses the default authentication scheme on the system – the same password a user would use for SSH.

Granting permissions to existing user using the GRANT command should be done using only the username without the IDENITIFIED WITH clause.